I recently got an email from the Kingdom of Loathing saying that they'd been hacked and had for a time been serving out redirections to malware. So I think that there's a large gang attacking every site that they can find with a variety of tools.
But I think that the Ubuntu guess is a good one since it's popular and these attacks do like to target a spike in interest in the website.