125,000-Plus Sites Tagged by SQL Injection Attack

A new and fairly complex SQL injection attack that began in late November has already contaminated more than 125,000 Web sites with a Trojan known to harvest credit card and other banking information.

The article continues at http://www.esecurityplanet.com/features/article.phpr/3852431/125000-Plus-Sites-Tagged-by-SQL-Injection-Attack.htm