My SO is empty nesting so apparently I'm playing the advent calendar game. This was today's gift and it is spot on.

The simplest way to get a malicious website in front of a potential victim is to create a Google advertising account, and buy your way to the top of the search results.

Beware fake tech support sites!

https://www.tripwire.com/state-of-security/tech-support-scams-exploit-google-ads-target-users