En ezen rohogtem: "The attackers most likely used an unpatched security issue in the FTP daemon to gain access to the server." :D