"Installing malware hosted by scammers must be easy"