from netcraft:

the compromise is "not due to any software exploits in Apache itself", but was instead due to a compromised SSH key.

private key oh private key...

actually I'm wondering how they figured out that it was compromised...

Labels: security