Keyloggers disguised as "key generators" are trivial to make. You run the .exe, it says "Key generated: XXXXX," but in the background, it logs every keystroke. Within 24 hours, your Steam, Origin, and Epic Games accounts are drained of inventory. Worse, if you use the same password for email, your bank is next.