Sites advertising "cracked" software packages lead into a network that serves up downloads full of malware instead.