More than 1 million website pages have been hit by a sophisticated hacking attack that injects code into sites that redirect users to a fraudulent software sales operation. The so-called “mass-injection” attack is the largest of its kind ever seen, experts say.