If you have to download a wallet for the airdrop, there is the potential it could have malware inside, so always scan it in a sandbox first!