Is It Like Hackers Are Able to Access the Site?

A lot of times you'll see like ads kind of getting placed, but it won't be the clients. It will be like ads that were placed by whoever got into the site. If emails turned on at the host, they'll send out email ads. And that could be just as sending out spam, but it also could be sending out phishing campaigns because people are more likely to trust it.