Infested downloads can deploy keyloggers to capture passwords, banking information, and personal credentials.