WordPress Data Recovery and Backup

I need your help with an urgent security issue on the GENES Conference website, genesconference.com. We discovered today that the site has been compromised and is displaying a fake Cloudflare “Verify you are human” page to visitors. After troubleshooting with Hostinger, they ran a malware assessment and confirmed repeated malware activity on the WordPress installation from August 5–16. They identified and quarantined 17 malicious files, and we also found malicious JavaScript associated with the fake verification page. Importantly, nobody on our team followed the fake verification instructions or ran any of the commands it presented. I’ve attached a full incident handoff booklet documenting everything we found, including the DNS/CDN investigation, browser/network evidence, malicious domains and JavaScript indicators, Hostinger’s scan findings, the quarantined files, available backups, and the proposed recovery plan. Hostinger has backups available, with July 5 being the earliest available backup from before their first malware detections. We are also preserving the August 16 files and database separately so that any legitimate changes made since July 5 can potentially be recovered selectively rather than restoring the compromised backup wholesale. Before I make any further changes, I’d really like you to review the attached report and take over the remediation. My priorities are to fully clean the site, determine the infection source if possible, preserve legitimate content added since July 5, secure the WordPress/Hostinger environment, check the other sites on the hosting account, and make sure this cannot simply reinfect the site after restoration. Please let me know what access you need from me and what you recommend as the safest next step. I have not proceeded with the July 5 restoration yet so that you can review everything first. I need help enhancing the website once this is complete.