Tonight I found by accident that someone had injected a bunch of crap links into the bottom of my personal site's
index.html page. I thought it was a script at first, but after going into my FTP account and looking at the file on disk, the links are actually in the HTML. After further inspection of my hosting account, I noticed a few other files that didn't belong to me sitting there.
I get it. Someone figured out my not-very-secure password, modified my file, uploaded some other crap. My question is, why? What do they have to gain? Were people being hurt by this code? Have I been a zombie for the past month or two? I don't have a database or even any server-side code, so I have nothing worth stealing.
The following are pastebin links containing the contents of the hacker's code:
I'm in the process of getting the hosting access logs from my hosting provider. I could probably provide those too if anyone would be interested in seeing them. Also, I apologize if I've posted this on the wrong site; this seemed the most appropriate given my options.