Setting up a fake website (or compromising a real one) in order to exploit visiting users.