A new worm that uses Google to find victims has infected and defaced nearly 40,000 web sites.

The worm sends Google a specific search request, essentially asking for a list of vulnerable sites. Armed with the list, the worm then attempts to spread to those sites using a PHP request designed to exploit the phpBB bulletin board software.