Because these programs must actively disable your antivirus to interact with core system files, bad actors use them as Trojan horses. Once you grant them administrator access, they can silently install credential stealers, keyloggers, and ransomware. Cryptojackers: