I'm curious to know what the attack vector was to hijack Craigslist; and of course if the affiliate link will credit the attackers with funding if they discover their visitors were fraudulent.