Researchers say the attacks have serious implications for the online advertising world, and regulators.