Security researchers from Sucuri and Malwarebytes have discovered two campaigns that abuse Google AdSense to push Google ads and trick users into clicking these ads. The first campaign was detected by Sucuri, a company specialized in web security. The second campaign revolved around shady blogs, created by scraping content from legitimate sites. Crooks pushed web traffic to these sites by using various black hat SEO techniques that tricked Google and other search engines into ranking these websites above others. The attacks didn’t target one specific platform, and the attackers compromised sites running on WordPress, Joomla, Magento, and even static HTML sites.
Source: https://www.bleepingcomputer.com/news/security/two-aggresive-campaigns-detected-pushing-google-ads-to-unsuspecting-users/