Anyone using WordPress should beware some nasty hacks, like that recently suffered by my good friend. Creators of malware should every bone in their hands broken.  Twice.