Many rogue streaming sites use phishing tactics, prompting users to sign up or install browser extensions that steal personal data and credit card details.