Zero-Click Browser Hijack Exposed