A mass injection attack similar but unrelated to Gumblar has infected more than 40,000 websites, according to new research from Websense.