Legitimate websites can be targeted by cybercriminals, older websites that are no longer managed may not be properly supported with good security, and some websites are built specifically to spread malware.