An automated SQL injection attack, which at one point compromised more than 70,000 websites, including some CA webpages, hijacked visitors' PCs with a variety of exploits last week, according to researchers.