It looks like armed robbers aren’t the only thing Pokemon trainers have to be wary of during their Pokemon Go adventure. That’s because your version of Pokemon Go could be filled with malware and security risks.

Niantic has stopped the global rollout of Pokemon Go due to its unstable servers, leading many outside of regions where the game has launched to side load it to their mobile device by downloading it online, rather than through the official App Store or Google Play Store. Unfortunately, hackers are taking advantage of the current Pokemon Go craze by sneaking malware into these files.

This information comes from Proof Point who has discovered a remote access tool called DroidJack hidden within on Pokemon Go APK, which is capable of giving a hacker full access to your phone. If you downloaded the Pokemon Go APK outside of the Google Play Store, you should check to see if the following permissions have been granted:

In addition to the possibility of malware, it appears the Pokemon Go app itself is a huge security risk as it’s been discovered both the iOS and Android version of the game request full access to your account, instead of just your email address. That means Niantic has all of the information that you’ve put into your Apple and Google account without even realizing it, which could potentially become a big issue if the company were ever hacked. In fact, the company could read all of your email, send email as you, have full access to your Google Drive, access your private photos, and much, much more.

As of now, those who play Pokemon Go should revoke all access the game has to your Apple ID and Google accounts considering the risk Niantic is putting us all in. Hopefully the company will update the game to only access the minimum amount of information, or else millions of people will continue to have their full accounts available to Niantic without even realizing it.