Hi all,
Hope this is the best place to post. My Drupal site was hacked, I just found out today, My provider fixed the issue which they described as a "zero day" vulnerability. They made a patch, applied it, restored my index file, informed the Drupal maintainers of the vulnerability and sent me the most informative, helpful and professional email, that I have ever had from a provider. These guy's give awesome service. They fixed the problem, created a patch and applied it, within half an hour.
Here's the email they sent me... I have no affiliation with them, other than I host some sites with them.
Hello,
Thank you for contacting TMDHosting Technical Support Team!
We have investigated thoroughly the issue and it turns out that the problem you have experienced was caused by a "zero day" vulnerability in your application. Unlike other vulnerabilities, the zero day ones are quite severe, especially due the fact that they are just discovered, usually not by the maintainers of the application, but by persons with bad intentions. Such a person appears to passed through your website exploiting this vulnerability and replacing your application's index with another one.