The website has been hacked. If this is a cms like Wordpress or Joomla probably the core or some plugin are not updated to the latest version.
You have to find the source of the problem, patch it and then remove all suspicious files.
Also always use strong password for mail, ftp and plesk access.