New OS X trojan injects ads into pages in Chrome, Firefox, and Safari 13 years ago
I've seen Yontoo for a while now(aka PageRage aka Sambreel), and they're not the only one doing this.
It's trivial for publishers to detect Yontoo's technology, and alert people when it's happening. Something as simple as:
try{if(new ActiveXObject("YontooIEClient.Api"))found=!0;}catch(e){};
try{found=!!localStorage['y2LocXML'+location.pathname];}catch(e){};