SANS Internet Storm Center counted some 1,070,000 URLs injected with the so-called lilupophilupop.com malware. That’s up from 80 pages it had found in early December, SANS ISC handler Mark Hofman says. The attackers compromise sites via SQL injection, and it appears to have hit sites worldwide. The most infections in The Netherlands “NL” domain, with 123,000, and includes some.com and.org sites, as well.”]
Source: https://www.darkreading.com/attacks-breaches/sql-injection-hack-infects-1-million-web-pages