A niche type of fraud is lucrative enough for criminals to set up fake websites with dodgy software to harvest your data