Users are often redirected to fake login pages designed to steal personal credentials.