I had a site hosted with Uptimehost (terrible host) ... and the wordpress install was hacked. I don't know how they did it. But they installed a shell on the domain. I'm re-installing wordpress. But I think they might have screwed with the database. My wordpress install re-directs to a shell, when going to my domain.
There's nothing on Google about this, so I assume that it's new.
I'm going to install a captcha on my wordpress login page now for all my domains.
MATRiX ALARAB Shell