You're right. My elderly mom has fallen victim, or nearly fallen victim at least, to tons of ads or sponsored spots served within Facebook, which are a bit harder to block. They can also outrun DNS-based block lists, probably because LLM's are allowing crooks to move faster and be more prolific.

I actually started making an LLM-powered browser extension that I thought could read the page and determine if it passed a smell test and block it if it didn't meet some strict criteria I'd set for her, but I didn't get very far before I became too concerned about prompt injection. Wanted to do the same on her e-mail, because gmail's built in filters sometimes let her down, but same concern. Prompt injection there may be trivial as well.

Its been a while since I've seen an ad on Youtube since I got premium, but I remember, at least for a while, every ad on there was a scam. At some point I think Google realized nobody would stop them, so they just started accepting anyone who wanted to advertise with them.