Visit a site, find security issues and send them home to hackers.
What looks like, and acts like – and is – a legit Add-On for Firefox has been compromised to assist in the compromise of others. For more information on how the Microsoft .NET Framework Assistant does this, see: Botnet Enlists Firefox Users to Hack Web Sites — Krebs on Security