Block all ads, blackhole ad domains
Advertisers poisoned the pot a long, long time ago with their abusive practices. This has worked out pretty well for those of us who have blocked ads for years. But just blocking ads isn't really enough - to really lock things down it's also important to block advertiser domains. Block the entire domain in either the router (if your router supports it), or in your firewall. Worst case null-route them in your hosts file.
Sure, advertisers know that people are doing this and they buy new domains all the time. So it pays to every so often check random webpages for third-party content that may be advertisers, trackers, or anything else that doesn't directly provide useful content on a page. Blackhole those domains.
Teach everyone you can about how to block ads and domains. If enough people did this then the advertisers would stop serving up malware, and either begin to act ethically or disappear entirely.
Biting the hand that feeds IT
