A contact form let attackers onto the server – then they rented it out
One web page that did not check what people typed into it. From there, attackers took the server, switched off its defences and put it to work making money for somebody else.
Read more