Hi there!

Thanks for reaching out.

You can find some helpful information and recommended steps in the following blog post:

Security Update for Joomla 3 Users

I hope this helps!

Best regards,

Hi Anton,

If you have Joomla 5 or Joomla 6, and you're still hacked, it means that:

1. On the same server there is 2nd site, thru it your site is infected each time, or
2. You didn't clean site deeply after last hack and there is hidden file "backdoor" waiting, or
3. You don't have strong firewall component, or
4. Your competition pays somebody to damage your site.

Can be also all together. For sure update everything with today's update, then scan site folders deeply!