How does a virus attach to a website?

I understand how a virus can be in an email attachment. How does a virus like Trojan attach to a website? Is this random or deliberate? Thank you in advance for thoughtful and informative answers.