"Data collection and phishing campaigns are much easier when you redirect that user to malicious site and the user doesn't notice," says Chris Morales, head of security analytics at security firm Vectra.