He's had his ftp password stolen probably, because his work machine was infected, and thru a script had an iframe inserted on every page on his server.
There are other ways this gumblar gets around, but that's the most common.
I think thats the modus operandi, but I'm no gumblar expert.
Chances are he has no idea.
we all fear this kind of hack - well, it scares me for sure.
|