: Fake installers often bundle trojans that inject malicious code into system processes (like explorer.exe ) to steal sensitive browser data and credentials. Persistence