Thousands of real websites are hijacked by cybercriminals using DNS to invisibly redirect and infect victims.