Yes. Virtually all tools advertised as password guessers are designed to compromise the user’s own device. Malware Risks : Many "guesser" programs or scripts are actually infostealers