Do not use torrent sites or random pop-up ads. Stick to well-known APK mirror sites that verify file signatures. Recommended sources include: