Thousands of websites hijacked through compromised FTP credentials