@Andy

Actually Andy, quite a lot of those malware infested boxES are compromised Linux shared hosting servers. So many web hosts pay no regard to security when setting up their servers. Security breaches are not the exclusive domain of Windows.