Redirecting to Privileged Users Don't Need Malware. They Need SQL Access...