Because these malicious payloads often come in the form of a simple text file or a lightweight executable (keygen), they can bypass older or less sophisticated antivirus definitions. If you are using a pirated version of NOD32, your "virus signature database" may be frozen or corrupted, meaning it won't detect the very malware introduced alongside the license.

: Simple, automated protection with a very low system impact.

Cybercriminals are acutely aware that people searching for "NOD32 licenses" are likely doing so because they are worried about security or unwilling to pay for it. This makes them prime targets.