http://www.incapsula.com/blog/world-largest-site-xss-ddos-zo...
Security company found a vulnerable Alexa Top 50 site where someone was able to inject XSS code in the comments section creating "DDoS Zombies" of the visitors.