The things at the bottom of the barrel in advertising are often literally malware.

So… Google, then?

It's not like it hasn't been repeatedly documented that malware is pushed through Google Ads and other properties.