A group of hackers used SQL injection techniques to steal huge amounts of data, court papers say. The U.S. alleges that the criminal group used the techniques to exploit poorly coded Web application software. Once they gained access to a corporate system, the hackers planted sophisticated packet-sniffing tools and other malware to detect and steal payment card data flowing over the victim companies’ networks. The attacks take advantage of a vulnerability that appears when a Web application fails to filter or validate data a user enters on a product or communicate with a company.”]
Source: https://www.csoonline.com/article/2124279/u-s–says-sql-injection-caused-major-breaches.html