Thousands of hacked sites infect visitors’ computers with malicious software