Data Exfiltration: The installer often contains a "stealer" component that scrapes saved passwords from web browsers (Chrome, Firefox, Edge).
