Fake download buttons often lead to pages mimicking Google or Netflix login screens. Entering your credentials hands your accounts to hackers.