Over 7,500 Magento sites, including major brands and government services, were hit in an ongoing mass-defacement campaign.