During this period, my ad was displayed 259,723 times and clicked on 409 times. That’s a click-through-rate of 0.16%. My Google Adwords campaign cost me only €17 ($23). That’s €0.04 ($0.06) per click or per potentially compromised machine. 98% of the machines ran Windows.
It’s almost too easy to create a malicious website and then just wait for visitors to become infected. 98% of the users were running Windows… and $0.06 per infection sure doesn’t sound like such a bad deal. Pays to pay attention.
Source: Didier Stevens