It's nothing new, myspace etc. have also been serving malware for a while. And it's a pretty obvious attack vector: highly popular websites with loads of unique daily visitors. Not to mention if you can build something that seems like a web of trust... which of course isn't that important, since your average myspace user has the IQ of a brick wall.