Pop-ups frequently trick users into downloading "required video players" or "browser updates" that are actually data-stealing software.