Just to add some detail as to how bad this was, they actually man-in-the-middled https connections to inject ads: https://en.wikipedia.org/wiki/Superfish