According to Avast,
malware is being served in ads from maintstream advertising networks. The moral of the story is to block all advertisements unless you can verify that a particular provider will never serve you malicious ads.
Sure, the content providers will be righteously butthurt about the loss in revenue, but if they can’t keep their shit clean, then fuck ’em.