For me they are making sites that you will required to put you're private key for something valuable or something like an investment this sites are called phishing site which are avoidable if one do some research about it. Next would be hacking the site exchanges which is hard to explain.