A number of websites including Yahoo, AOL, and 9Gag have been exposing users to ransomware according to the International Business Times. They offer that none of the sites needed to be compromised as the malware was simply offered as advertising and the advertising networks didn't care to check the payload would be inoffensive to their audience.