Modded APKs are not hosted on the secure Google Play Store. They are found on third-party sites. Malicious actors often hide inside these "Unlimited Money" files.