US security researcher Zach Edwards recently tweeted about finding 250 company website names that had been taken over by cybercriminals.

Source: Naked Security by Sophos