: Hackers often embed malicious code—like ransomware, spyware, or keyloggers—directly into the installer.