But do they work? Or are they a sophisticated trap designed to steal your credentials and brick your phone?