Two reports released this week confirmed the tidal shift in the type of websites into which cybercriminals are injecting malware.