How Free DDoS Sites Exploit Users and Spread Malware