A malware Trojan scheme was recently identified on The Pirate Bay, where scammers started seeding a host of cracked software copies, replacing the original source files with malicious files of their own.

Discovered by kaspersky Labs, the "Pirate Matryoshka" torrent malware was part of software files downloaded from the Pirate Bay. When the software installed ran, it displayed a fake Pirate Bay authentication window. Those who took that phishing windows for granted and entered their Pirate Bay logins and passwords, send their credentials directly to the creators of the malware. Their Pirate Bay accounts were then used to create new fake uploads — and that’s why you cannot identify a fake by looking at the account registration date alone.

However, account hijacking is not where the scammers make their money. A lot of extra software comes with the application someone is looking for "Partner programs" pay for each installation of certain software on a victim’s machine.

Although the bonus software is not always malware — Kaspersky estimates malicious apps account for only one in five — it does not make the user’s life any easier. From that day on, affected users would have to battle legions of optimization programs that obscure their screens with ads, browser toolbars that change the homepage and add their banners to every website, and even Trojans.

Users generally have the option to skip the extras when they install their software. However, in case of the Pirate Bay infection, there’s no way for users to do than, Kaspersky says. Before triggering the installation process, the malware runs autoclicker modules that automatically tick every box, leaving users no chance to decline.