These sites often survive on aggressive advertising. Clicking a download link can trigger pop-ups that install spyware or ransomware on your device.