One article I saw implicated a Rackspace server in the attacker's side of event. I presume that meant Slicehost.<p>If I was breaking into computers "off the clock", I'd probably look to just-a-CC# no-questions-asked hosting providers (probably overseas) as my staging ground. This is something new. Commodity virtualized VPS systems like Slicehost are an awfully convenient way to launder attacks.<p>It's only been in the last couple years that VM slices have been so quick and easy to buy.