Just about every shared host is under attack at all times. Servers where thousands of people run old versions of widely used open source software (blogs, CMS's, contact forms, etc) are such easy targets for exploiting known security flaws.
Aside from not using shared hosting at all, at least don't use shared hosting provided by a domain registrar. The combination of supporting millions of customers and hosting not being their primary business means hosting MUST be treated as a commodity for them to offer it at all. They're not going to have the people bandwidth to help customers clean up their sites after they're hijacked.
As a former GoDaddy hosting customer, let me tell you all that these attacks are not new business. There was a point in May where our sites were attacked weekly with massive damage done. We would perform all the fixes they recommended yet the next day our site would be hacked to crap again. It is obviously a huge vulnerability on their side (from what I remember it was with their phpmyadmin implementation) yet all they did during this time was blame their customers saying it was security flaws in the php software installed by their customers.
Aside from not using shared hosting at all, at least don't use shared hosting provided by a domain registrar. The combination of supporting millions of customers and hosting not being their primary business means hosting MUST be treated as a commodity for them to offer it at all. They're not going to have the people bandwidth to help customers clean up their sites after they're hijacked.