As someone who works in the web hosting biz, I can say this is true. I've seen lots of websites running insecure CMSes and the like get exploited to host phishing sites. Chances are it's easier than signing up for a free hosting service. ;D