The United States' Department of Labor's website has been breached and is serving up malware in drive-by-download attacks, security researchers warned.