It's likely that your website has been hacked.
If you use a CMS and haven't been keeping it or its plugins up-to-date, that's usually a common avenue of attack. Newer versions usually patch old vulnerabilities.
It's usually best to restore the site using a backup from before when the symptoms appeared. Then update your CMS and plugins and change all your passwords.