Since people first began to hear about viruses and other types of malware going beyond infected email attachments to spread also via infected websites, a common misconception has prevailed: that only ‘illegitimate’ websites – such as porn or gambling sites – can be infected.