@JEDIYoda you are so in the wrong here. Like saying, "If I don't vote, then someone like Donald Trump will never end up in the White House..." You can see how that goes.
More specifically, though, browsers these days auto-execute page content, as part of web loading. And when browsers are discovered to have a hole in their security, well, the code can exploit that. Without you clicking.
It's like holes in your skin, and infections.
Edit: Oh, and
@JEDIYoda, I WAS infected by online malware, they 0wn3d my whole machine at the time, which was an XP HTPC. I had gone away on vacation, and come back, and NOT UPDATED MY OS OR BROWSER BEFORE GOING ONLINE.
I DID NOT click on "ads". (I never do.)
Yet, my browser started executing COMMAND PROMPT Windows, all kinds of BLEEP started exploding on my screeen.
That was when the WinHelp HTTP helper was exploited, MS had left a huge hole in the code, and BOOM! Just going to a site, malware drove right in!
Edit: Your attitude is, if I don't drive near bars, then I'll never get hit by a drunk driver. Well, some people DO still get hit. And your experience of not "getting hit" (YET), does not PROVE that no-one else gets hit or has gotten "hit". Horribly, horribly, naive point-of-view, that totally escapes logic.
Edit: I assume that you are staying up-to-date with patches for the OS and your browser. That mitigates a large portion of "0-day" attack vectors, like the one that I got hit by. Maybe that's why you've come to the conclusion that you have. Another way of possible stating your viewpoint could be, "Stay patched and up-to-date with software, and your chances of being hit by a 0-day drive-by ARE GREATLY REDUCED."
Try shutting off browser and OS auto-updates, and then go surfing pr0n sites six month later. Then get back to us how many browser/OS infections that you have.
Some malware, are nearly invisible.
This looks like a very serious problem for windows users. It supports basically all popular windows browsers, steals passwords saved on your browser (as well as other info). It is somehow able to inject DLL and install itself onto windows computers. This malware CNC suite was offered for sale on...
forums.anandtech.com
Edit: OH, and before I forget, I'm basically saying that JediYoda is wrong, that you CAN get (I did!) malware, just by browsing, and not even clicking any ads.
BUT THAT DOESN'T MEAN THAT YOU SHOULD CLICK ON ADS. DON'T EVER CLICK ON INTERNET ADS. JEDIYODA IS RIGHT THAT YOU SHOULD AVOID CLICKING ON ADS.
ALSO, ALWAYS KEEP YOUR BROWSER AND OS UP-TO-DATE WITH PATCHES.