Law Firm Sites Hijacked in Suspected Supply-Chain Attack