Some activators don't install obvious malware but modify your hosts file to redirect you to fake banking websites. You type banco.com.br into your browser, and you are sent to a perfect clone that steals your account credentials.
: Official keys for various versions of Windows Server and Office are listed on Microsoft Learn for use with local KMS hosts. Risks of Unofficial "Ativadores" Get help with Windows activation errors - Microsoft Support