Malware popups aren't just annoying—they are attack vectors . A single click promising "Your PC is infected" or "You won an iPhone" can lead to ransomware, credential theft, or remote access trojans (RATs).