Urgent WordPress / PHP Malware Cleanup & Website Security Fix Needed

Hello, I need an experienced WordPress / PHP security expert to urgently fix my website: https://rfkultra.com My hosting provider informed me that my website has been hacked again. They found malicious obfuscated PHP malware code inside the index.php file. The hosting provider can restore the website from a previous clean backup, but they advised me that I need a developer/security specialist to investigate the root cause and prevent the malware from coming back again. I do not need only a basic restore. I need someone who can fully clean, secure, and protect the website. What I need done: Fully scan the website files and database for malware Clean infected files, especially index.php Check for hidden backdoors, suspicious PHP files, malicious redirects, injected code, and fake files Check .htaccess, wp-config.php, uploads folder, themes, plugins, and database Find how the website was hacked Remove any infected plugins, themes, or suspicious admin users Update WordPress core, plugins, and theme safely Secure the website so the same malware does not return Recommend which passwords I should change: WordPress admin, hosting, FTP/SFTP, database, etc. Install/configure a proper security plugin or firewall if needed Make sure the website is working normally after the cleanup Provide a short report explaining what was found, what was fixed, and what I should do next Important: The hosting provider already said the site was hacked again and that index.php contains malware code. I need someone who has real experience with hacked WordPress/PHP websites, malware cleanup, and website hardening. Please apply only if you can start quickly and know how to properly clean and secure a hacked website. When applying, please answer these questions: Have you fixed hacked WordPress or PHP websites before? Can you clean obfuscated malware from index.php and check for backdoors? How fast can you start? What access will you need from me? What steps will you take to prevent the malware from returning? Thank you.