Most websites usually employ third-party services for advertising on their webpages.
Spam messages that include malicious attachments, links to binaries and drive-by download sites are another common mechanism for distributing rogue security software.