send a remote install keylogger,or use a phishing website