Figured it out from googling around.
config.inc.php was hacked, replaced with backup.