A site I host was recently hacked. The index page had the following code added to the bottom (just above the closing body tag):
<script language="javascript">document.write('<div style="font-family:Tahoma,Arial,Helvetica,sans-serif;font-size:12px;overflow:hidden;color:#FF0000;height:' + (325 * 3 - 974) + 'px;width:' + (18 * 786 - 14147) + 'px;font-weight:bold;margin-top:0px;margin-bottom:0px;">'); </script>
Followed by...
Lots and lots of tags going to spammy sites...
Our server has suphp installed, so I don't think it could've happened from another account. This account does have Wordpress installed, so that may be the problem.
Any tips on where to go from here?
Thanks!