I think the only legal issues is from an anti-competetive angle which the courts would have to settle. I don't think they are violating any sort of computer crime laws. It definitely feels slimy, though.

Worst case scenario, they could just move the banner to be "within the browser's GUI" (while still seeming to extend over the page) rather than actually in the page and that issue would go away.