[slodave]

Tim, these types are not after any info. They simply are "tagging" in the cyber world. They setup scripts that run against servers out there and try to exploit weaknesses, such as in the FTP servers, webservers. When the script finds a weak one, it can inject crap into users root folders, such as yours. I bet a lot of other customers at your hosting site have been 'pwned' as well.

They usually copy your homepage over and insert the one you see, leaving your website mostly functioning.

Dave