"While the payload in this case is ad fraud malware, it could just as easily have been ransomware, an information stealer, or any other malware.
"Regardless, threat actors are following the money and looking to more effective combinations of social engineering, targeting, and pre-filtering to infect new victims at scale."