Researchers at IBM's X-Force Research have discovered a Windows banking trojan that is unusual in one major respect: it uses a Microsoft SQL Server database server as its command-and-control server.