This seems to be doing the rounds at the moment... a site related to a handheld console (the name of which dare not be spoken) was done over too. In addition, their members each received a (dodgy) email purporting to come from the site admin encouraging them to run an attached executable.