A malware campaign using counterfeit pages for Microsoft Edge, Kaspersky, and Razer shows how ordinary software-seeking behavior can become an initial-access trap on Windows.