I just discovered that my own website was infested with a malware, though I'd received no complaints. That's why I joined this forum just now: I wonder what this malware is.
The hacking is complex enough to make me think it was done manually, not by any bot.
The home page had been changed from 'htm' to 'phtml' with an include line added at the beginning. The include pointed to a file I've left intact for your inspection:
Despite the '.gif', this is a...