While Managed Service Providers are often the "best" answer for many businesses without the internal expertise or resources to manage their own information technology infrastructure, they are also a point of vulnerability when compromised.  In effect, they become a "trusted" distribution channel for malware...