Zip files from unverified sources can hide scripts that damage your phone or computer.