One of my older relatives searched google for the name of his bank, clicked the first link which was an ad for a phishing site, and 5 minutes later he was on the phone with some indian guy who was using remote desktop to install packages through some janky DOS interface. It was probably cleanable, but I just wound up formatting his hard drive and reinstalling with some really cranked-up adblockers. It was an hours-long hassle, and thank god he managed to change his banking passwords and put a fraud notice on his credit card, because he had handed all that info over.

I couldn't help thinking that that Ad was a lot like a locksmith accepting a few bucks to let some burglar into my house no questions asked, and then explaining to the cops that he's just as much a victim as I am.