Security firm Websense is warning that that the mass LizaMoon SQL injection attack discovered earlier this week is much bigger than previously thought, and that over 380,000 URLs have been affected.
The firm first warned of the attack on Tuesday, claiming that hackers had injected a single line of code into thousands of web sites, linking the viewer to a well-known fake anti-virus site at defender-uqko.in.
Among the pages infected were several iTunes URLs, although Websense explained that Apple's security measures would have blocked any attack.
Initially it was thought that the mass SQL injection attack affected some 28,000 domains, but that number has now increased more than 10-fold.
Carl Leonard, senior manager at Websense Security Labs, argued that LizaMoon is now one of the largest mass injection campaigns ever seen.
"We have been monitoring the attack since it came out and noticed that the number of the compromised URLs is still increasing, moreover, more domains - different payload sites - have started to be involved in addition to the original lizamoon.com," he said.
"The payload sites remain inactive at present although they could be ‘switched' on at any time. We can only speculate as to what the bad guys are waiting for."
IBM hopes that its new tool will avoid bias in artificial intelligence
Found by calculating the strength of the material deep inside the crust of neutron stars
Can highlight in real-time the relevant regions of an image being described
Double legal trouble for Musk as he also faces civil lawsuit over renewed British pot-holer 'paedo' claims