Tom Espiner, ZDNet.co.uk did report in June about the increasing amount of webbased malware on ligit websites:
QUOTE
Web-based malware on legit sites soars

Tom Espiner ZDNet.co.uk
Published: 05 Jun 2008 17:30 BST

The amount of web-based malware on legitimate sites has increased by over 400 percent since last year, according to security vendor ScanSafe.

In a security report entitled A comparative look at the state of web security, May 2007-May 2008, released on Thursday, ScanSafe found 68 percent of all internet-based malware was now being hosted on legitimate sites.

"The compromise techniques being used now allow hackers to quickly 'colonise' thousands of legitimate sites, from big brand-name sites, to smaller but equally legitimate sites," said Mary Landesman, senior security researcher at ScanSafe.

Techniques to compromise websites, including Iframe and SQL injection attacks, are becoming more ubiquitous, ScanSafe warned.
...

More to read:
http://news.zdnet.co.uk/security/0,1000000...39429909,00.htm