I'd not consider it malware if its sole purpose is to do ad/click fraud. The user is not the target here, the user's enemies are :)