The Asprox botnet, initially exclusively used for phishing scams, is now an SQL injection vector for website attacks.