Drive-by downloads

These occur without the knowledge of a user. A user must simply visit an infected website to trigger the malware download. Hackers continuously attack legitimate websites to inject malicious code. Then, when a user browses that legitimate website (not knowing that it was compromised), the injected code is loaded by their browser automatically, resulting in infection.