Liability was my first though. How is an assertion that a site contains malware not libel? Site would be easily able to demonstrate lost revenue.