UPDATE: the reason was in the malicious code in the beginning of the index.php file. Watch for the UNA files and folders permissions: all directories should have 755 (except selected in the the Studio->Files and folder permissions area), all files - 644 (except the ffmpeg.exe).