Login credentials, browsing history, and even saved passwords can be extracted via drive-by downloads that occur the moment you load the webpage.