Keenadu downloads payloads that hijack browser searches, commit ad fraud, and execute other actions without user knowledge.