Hacked site

The website has been compromised and the public homepage has been replaced with a hacker defacement page displaying "HACKED BY TRENGGALEK6ETAR". Here is what I know so far: The website is running on Joomla 3. The administrator backend is still accessible and working normally. I have full access to cPanel. I attempted to restore the public_html from the 30 June 2026 JetBackup, but the hacked page remained unchanged. This may indicate that the compromise happened before that backup or that the malicious code is located elsewhere. My immediate priority is not a full redesign or upgrade. I only need the website to be back online and working, preferably restored to its May 2026 version, even if some recent changes are lost. Once the website is live again, we can then: investigate the source of the compromise, remove any malware or backdoors, update Joomla and all extensions, and secure the website properly.