A: This is called a drive-by download . Malicious code on the webpage can exploit vulnerabilities in your browser or plugins (Flash, Java) to install malware without your permission.