Serious question: How can I get some Bitcoin stolen?

I'm genuinely baffled by how people manage to get their bitcoin stolen by malware. Every day on reddit I read tales of people having crypto stolen from their PC or phone by malware and I just have NO idea how they're accomplishing it. Now I come from an IT background and my OpSec is pretty tight, so I just might not engage in the sort of risky behavior that these poor users are.

My question for the community - what sort of high risk activities can I engage in that will probably result in being infected by malware? I'm thinking torrenting porn or cracked software will get me there pretty fast. Any other suggestions?

I'll carry out the suggestions on a virtual machine and see how hard it is to get some BTC stolen and then put the results on my youtube channel.

My thesis is that you've got to go pretty far out of your way to have your BTC stolen by malware, but I want to find out.

Cheers!