Occasionally, Celsys or hardware partners (like Samsung) run promotions.
Cracked software is the #1 vector for infostealers. Hackers embed code that scrapes your browser saved passwords, cookies, and even cryptocurrency wallets. If you log into PayPal or your bank on that device, assume the credentials are compromised.