Sites are being hacked by black hatters - a pretty wide spread form of affiliate marketing when cheaters create a page on a hacked site (.edu domains are primarily targetted) and either use a redirect with an affiliate code or they just create a landing page and skim the search engine market.