They are praying on people's inexperience with Android... Android DOES have malware, but how an Android device is compromised is far far different than a windows desktop system... the simple act of going to an infected page on a desktop can wreak havoc on things. But on Android, everything is so compartmentalized that this is either impossible or extremely difficult to pull off. I haven't heard of any instance where a browser page has infected an Android device with malware... To infect a newer Android device, you really need to sort of trick the user into installing an app, and even then the damage is limited unless the person has in some fashion compromised their phone's security measures (such as rooting a phone and not paying attention to what they install).