Cybercrime is a business, and running a malware or phishing campaign does require some financial investment by the bad actors. A recent phishing attack detected by Cyren clearly shows this investment, as the attack vector is pay-per-click advertising via Google AdWords. The Ad showed up in response to searches for blockchain a bitcoin related term. Close analysis of the advert shows that the link is actually to bioklchain.info but at a casual glance the link appears to lead to the legitimate blockchain.com”]
Source: https://www.cyren.com/blog/articles/2016-Q2_bitcoin-phishing-via-google-adwords