Thanks for this in-depth look. It's the reason I run Ublock and NoScript even on sites I like, no Java, no Flash. Can't trust their ad network at all - not their fault, but whoever they're using for ads is less cunning and evil than the Russians (even Google) and nobody's really doing much about it because they just don't care that much. This article just really drives that home.
In addition, even the non-malware ads are so bad as far as terrible scripts and bloat (like the Verge's 1000:1 crap:content ratio) that whenever I run without blockers on other people's crapboxes it's a whole new, terrible ghetto web. How can you people live like this?
So subscriptions and Patreon are all I'm willing to do. Think about it, Reg.