These sites often hide "drive-by" downloads in play buttons or pop-ups. These can install keyloggers, ransomware, or spyware on a device.