An advertising network is hiding in-browser cryptocurrency miners in the ads it serves on customer sites. Ad network borrows well-known malware trick to avoid users with ad blockers. The advertising network uses a trick normally utilized by malware families namely a domain generation algorithm (DGA) Malware strains mostly banking trojans use DGAs to generate unique domain names for each day to which infected hosts connect to receive new commands from the main command and control server. Most of the ads served by this ad network are found on sites that offer free downloads or adult content.
Source: https://www.bleepingcomputer.com/news/security/ad-network-uses-dga-algorithm-to-bypass-ad-blockers-and-deploy-in-browser-miners/