All of the VPN services shared a common Elasticsearch server, have the same recipient for payments ("Dreamfii HK Limited"), and three of the services even have nearly-identical websites. We've reached out to Google to ask if the VPN applications will be pulled from the Play Store, but we have not received an answer yet. In the meantime, if you use one of the affected services, it's probably time to start changing passwords.