It's a "legitimate" corporation. The malware has a "legitimate" purpose. The user "technically" agreed to the abuse when they mashed next on the install wizard.

I seriously doubt any anti-malware software will block this.