Half a million websites have been infected with a new round of malware attack and poorly implemented website configurations have been blamed.