It can start with something as mundane as dragging a link into your browser. Three seconds later, a threat actor has the ...