Bad bots or malware can do nefarious work like attacking websites, stealing one-time passwords to log in, and many more.