Mercutio
Fatwah on Western Digital
A lot of malware is distributed by completely mainstream Advertising Services like Doubleclick. All it takes it for one ad with a snippet of javascript that invokes an Acrobat exploit to run once every 10,000 impressions on a big site like cnn.com for a half hour or so and a malware author is in business.