Cybercriminals love XP nostalgia. Many "SP4 ISO" files circulating on torrent sites and file lockers are pre-infected with keyloggers, cryptocurrency miners, or ransomware. Because XP has no modern security features (like ASLR or DEP in its fullest form), these infections are often invisible.