Attackers exploit this demand by offering fake decoders that actually install trojans, backdoors, ransomware, or cryptocurrency miners.