Oh, found an article about this issue in http://thenextweb.com/insider/2016/10/05/spotify-malware-inf...

Even though it's free, can't they be held responsible for damage resulting from this? Anyway, another reason to use dns-based ad blocks or their web version with adblock.