A wave of malware is hitting online advertising