Security experts at Symantec estimate that around 40 million people had fallen victim to these " scareware " attacks in the last year alone , while another security firm , Dasient , believe more than 600,000 sites have been hacked to run malicious programs , unbeknown to the website 's administrators or owners .