A recent spate of aggressive SQL injection attacks have seen sites across the globe being hit. Amongst the casualties are numerous well known brands. Almost 75% of the affected sites are hosted in either the United States or United Kingdom. All the sites affected are hosted on IIS web servers, predominantly IIS 6.0. There are subtle differences between how each can be handled in terms of detection and the effect of each on the potential victim. Sadly, given the success the attackers are enjoying, I think we can expect to see many more similar attacks in the near future.”]
Source: https://nakedsecurity.sophos.com/2008/05/09/sql-sorcery/