Clicking download or streaming buttons often triggers background scripts that install malicious software on phones and computers.