Comment by err_badprocrast

I think they only realized it happened after name.com was mentioned as a hacked site in HTP5.

http://www.exploit-db.com/papers/25306/