Cybercriminals are using sponsored links on both Yahoo and Google to promote malicious applications.