Cybercriminals use malicious URLs in email marketing for several reasons. These include stealing personal information, distributing malware, gaining unauthorized access to systems, and conducting fraud. The deceptive nature of these URLs makes them effective tools for cyber-attacks.