Almost always someone who doesn't understand BGP making a mistake in conjunction with an upstream provider that is incompetent enough to not have prefix filtering in place to avoid putting bad prefixes out into the global routing table. Though, sometimes it certainly is malicious, and impossible to protect against. If someone hijacks your prefix, you basically have to start trying to call all of the upstream networks to see if they can fix it.