I've seen "Agent cloaking" in a compromised site. If the user agent was a bot the script injected some extra text recommending a service.