These can come from a variety of sources. Researchers found that more than 50,000 browser extensions and 34,000 software apps took control of browsers in some form to inject ads – up to 30 percent of these stole account credentials, hijacked searches or reported user activity to third parties.