Malwarebytes Anti-Exploit and Anti-Ransomware can block this attack at their own respective stages. Ad servers are the ideal candidate since they are used by hundreds or thousands of other websites relying on advertising. This could very well be an accidental malvertising case (a hacked site simply happened to be also used to serve ads) or perhaps, and time will tell, attackers are focusing on such infrastructure as they know it will yield a greater return. The payload from this campaign is Locky (Zepto flavor) that asks for 1.5 BTC (approximately $939.53)”]