Attackers can boobytrap what should be access to only parent-vetted sites and can take over the webcam, speakers and microphone.