What can malicious Monero nodes that you connect to learn about you?
1) IP address
2) Last block synced
3) Manipulate your decoys when creating a transaction to reduce your sender anonymity
Solution for 1: use Tor or a VPN
Solution for 2: use Tor or a VPN (change your VPN server often and/or switch to a different node often)
Solution for 3: If your transaction ever fails/errors out (very rare), switch to a different remote node and try again to be safe.
What can malicious nodes **NEVER** learn?
1) amount being sent
2) address you're sending to
3) previous transactions you’ve sent/received
4) amount of Monero in your wallet