Looks like the electronic equivalent of a Graffiti painter.Probably
some 'script kiddie' who is targeting a known vulnerability of some
particular CMS, which would explain why a lot of sites were affected..

Part of the reason you need to keep your 3rd party code (if you use
any) up to date and to read the PHP security texts, especially if you
write your own programs.