My website has been hacked. The hacker exploited some security hole (probably an old, no longer used WordPress install that wasn’t properly deleted), and modified my files to inject all kinds of (invisible) ads into my good content. That stuff then shows up on search pages.

This is extremely distressing because (1) this actually damages my Google ranking, which is valuable, (2) I am finding myself unable to recover from this attack on my own, and DreamHost, my provider, is not being helpful.

I’ve deleted the hacker’s files and changes twice, and changed passwords, but he’s come back twice already and changed everything back. Extremely frustrating. The latest attack was recent enough that it should be in DreamHost’s log files this time, though, so hopefully they can finally shed some light on how he’s getting in. If they can’t help this time, however, I’m going to have to take more drastic action.