In reply to Chris.

A question worth asking but I don't think it lines up with this threat. If my goal were to obtain credit card information, for example, I would hide my presence as much as possible and will avoid injecting malvertising. Considering Daniel's point, we would also have to decrypt the secure connection for this type of information.