Brian Kelly on his blog mentiones a whitepaper by Cesar Cerrudo: Data0: Next generation malware for stealing databases. This whitepaper describes how malware could be crafted to steal information out of databases. The attack will use the following techniques: Discovery Exploitation Escalate Privileges (if necessary) Cover ...