When a visitor tries to download an app from a fake site, they are redirected to the MEGA file hosting service webpage, which offers them a zip file, containing a trojan installer package, for download.
Another reason to use adblockers. Does ads that are part of search engine results can be dangerous.