Malicious ad for USPS fishes for banking credentials

Users clicking on seemingly legitimate ads for postal package tracking can be redirected to malicious websites that collect sensitive data, such as credit card details and banking credentials.