Security experts are tracking a new malware variant, targeting the MySQL open-source database, which has likely infected thousands of Windows systems.