How would a scammer change my browser.newtab.url? How would a scammer be able to change my browser.newtab.url without an attacker also being able to change my

How would a scammer change my browser.newtab.url? How would a scammer be able to change my browser.newtab.url without an attacker also being able to change my network.proxy.http?