Hmm, if it's a click-collecting scam, maybe they're only getting paid for Brit or US clicks? I dunno. Strangely specific for a malware. Not Stuxnet-level specific, but still.