Has Max been informed?

He can probably remove the <iframe ...> statement at the bottom of the page immediately, and thus buy us a couple of days rest. I wonder if his cryptic "Worst Idea Ever" thread is related to this one - it would not be surprising. Panic is certainly a bad idea if you have the choice (though there are much worse ideas), but well-advised action is required. Other websites have suffered and warded off similar attacks.