A new SQL injection hack has topped more than one million infected sites with viewers directed to a site selling bogus anti-virus software. The so-called ‘Lilupophilupop’ attack involves hacking the ...