Malicious software can take different forms. And the only reason it exists is stealing and selling your personal data. And yes, unfortunately, malware can be hidden inside a free VPN service. There are a lot of ways cybercriminals can benefit from your information. For example, they can display various ads, send spam messages, hack your accounts.