That is the perfect description. malware!
What is sad is that there is no going back from this. Now that we know that they do this, I'll never believe they aren't doing it in other domains, or won't extend it to other domains in the future. This is probably the worst thing they could have possibly ever done for trust.