Microsoft is trying to stem the tide of poorly coded but legitimate websites falling prey to attacks.