These can come from a variety of sources.
Researchers found that more than 50,000 browser extensions and 34,000 software apps
took control of browsers in some form to inject ads – up to 30 percent
of these stole account credentials, hijacked searches or reported user activity to third parties.