Not just that. :D
Since Google starting gathering data from the machines that people were using to display the adverts. This includes the OS versioning, and, update status.
Bad actors then use the market segmentation to find vulnerable machines, so only unpatched machines would have the malicious adverts displayed.
The adverts do a re-direct to another website that performs an automatic "drive-by" installation of malware.