As usual with one of these articles, so many questions. How is the payload executed? By normal browser scripting? If so, why does the browser have permission to do the bad stuff?
If the ads were hosted by dodgy sites, could they also be hosted by reputable sites serving up malicious ads on a legit ad platform? Could you see one of these ads even if you weren't just looking for pirated movie streams?
I realise that asking these questions probably disqualifies me from even running a browser, but I would guess I'm with 99.99% of users if that's the case.
