Conceal malicious actions by imitating user actions