Here is one issue that I have seen which wasn't mentioned. They put innocent sites urls in hacked pages (including casinos)
example: kleinkrieg.com/blog/wp-content/plugins/democracy/927?easy=278 if you change the number "927" from anything from 1 to 999 you will see different pages all containing links to sites.
