They can be easily generated/distributed at almost no cost and it's difficult to tell in advance if one is malicious or not.