Read this:
http://mezzoblue.com/archives/2007/06/05/unsettling/
For those who host with Dreamhost: I received a confirmation email from them at 8:27pm PST on June 5th that yes indeed, something in the neighbourhood of 3,500 FTP accounts have been compromised.
Read the comments too... it's not just dreamhost.