Same shit happened to me about a year ago with a couple of my sites.
Turns out that it was a PhpBB glitch and hackers exploited it to get the admin login. They used it to hide links, etc. With one of my sites they installed a popup and I didn't know about it until about 5 months later when I went to view it. One of my sites had a Google PR of 5 so the link had to have helped their SEO.
__________________
|