Cleaning up a customer's PC, I made the mistake of leaving a tab open on Yahoo's home page. Only 1 minute later: malvertized. Sunuva...
I did it again to pin down the cause, & indeed it's Yahoo's ads breaking out, taking over the page, & loading scary messages that make it difficult to leave.
I can't stress enough, folks, that an ad blocker is Internet SECURITY software.
Unlike the simple on-off switch built into some browsers, NoScript & ScriptSafe are selective & granular JavaScript blockers. That means, with either of them, you can allow JavaScript from a website's domains while blocking & distrusting JavaScript from ad network domains. And that distrust of an ad network's JavaScript (or any domain's JS) follows you across the World Wide Web to every website attempting to use it on you, not just the one site you distrusted it on.