Prosecutors believe the sites were really being used to steal people’s personal information