All users who have logged into the site are being instructed to change their passwords (presumably because they have been compromised) and the site’s homepage has been taken down. This attack created a fake istockphoto.com login screen, prompting users for a username & password, saved them to a malicious server, then redirected the user back to the iStockphoto main page.