Many sites use the toolkit as a "Trojan horse." Because the toolkit naturally triggers antivirus warnings (due to its nature as a licensing bypass), users often disable their security software to run it, leaving their systems defenseless against hidden spyware or ransomware.