Some sites have also been known to trick users with fake play buttons that lead to phishing pages designed to steal personal data.