I too was hacked today. They were able to post an index1.html page, and update the .htaccess file to load the new index.
4 sites hacked.
They then post the sites they’ve hacked on their trophy page; here is Don Ojan’s page:
[ link to trophy page removed ]