> It's funny how a company like Google making Billions from ads, having ton of smart engineers, have never figured out during the last decade how to "scan ads for malware".

Google claims they are doing just that :

https://googleblog.blogspot.fr/2016/01/better-ads-report.htm...

Now when did they start doing it is also a relevant question.