This is standard practice for hacked wordpress sites. They only serve the compromise to organic search traffic.