561
According to Cisco , instead of using malvertising or spam campaigns , crooks buy legitimate ads via the Google AdWords platform and place links to their phishing sites at the top of Bitcoin - related Google search results .
 buy legitimate ads via the Google AdWords platform: attack pattern; crooks: attacker; their phishing sites: tool
Given event type and trigger, please tell me the arguments of all the listed option. Output format is "name1: role1; name2: role2". 
Event type: phishing 
  Option: victim, attacker, attack pattern, purpose, damage amount, tool, time, place, trusted entity 
Text: {0} 
Answer:
 buy legitimate ads via the Google AdWords platform: attack pattern; crooks: attacker; their phishing sites: tool