SANS Internet Storm Center counted some 1,070,000 URLs injected with the so-called lilupophilupop.com malware. The attackers compromise sites via SQL injection, and it appears to have hit sites worldwide. The most infections in The Netherlands “NL” domain, with 123,000, and includes some.com and.org sites, as well. But the 1 million URL number might be inflated, says a security researcher for ScanSafe, which is part of Cisco.”]