Web attacks are routinely hosted by actual sites infected and acting as zombies, security firm warns.

More...