i don't know, I had my yahoo account hacked into by a emailbot. It sent vaigra ads to all the emails I had as contacts. It did it twice. I had to add an X into the actual email addresses so when the bot comes calling, the emails get sent nowhere. Not sure how that happened but since yahoo is my "surfing email", it's not something I worry too much about.
Best way to protect yourself is to get Malwarebytes as a supplement to your anti-virus software. It's free but you don't get realtime protection unless you pay for it. but you can manually use it any time you think you've caught a bug.