But when hackers, are at advance level, they simply have to load some javascripts on your browser, and once they got in, they can install there respective malware easily. But this attack could be avoided easily if you are using a good and up to date browser. Because usage of out kf date and not reputed browsers then you are a sitting duck.
I am using chrome up to date browser and sometimes Mozilla Firefox and also popup spam has been blocked with default and i am not seeing any chance for malware to download automatically. Moreover I use windows 10 which always ask for" allow access" when I install any thirds party software. I think there is no chance for malware to install in my PC without my permission. anyway I am not using my main wallet and exchanges in the PC because my wallet compromised two times.