Malware spread through mass SQL injection attack

Source: The Register

A massive number of websites ("tens of thousands") have fallen victim to an SQL injection attack. The affected websites were modified with links to a domain (uc8010 dot com) which contained a cocktail of browser and media player exploits (all known and patchable) and associated key-logging malware.