Stepping Through A Mass Web Attack

**Mass web-based drive-by attack leveraging SQL injection and browser exploits** — The report describes attackers injecting code via SQL injection into vulnerable Microsoft ASP sites (including a noted compromise of Travelocity) to host scripts that chain multiple browser vulnerabilities, enabling large-scale client-side infections aimed at stealing credentials and delivering malware; mitigation recommendations include patch management, AV, and blocking malicious URLs.