Some details in here too:

http://blog.sucuri.net/2009/12/twitter-defacement.html