I have malware on my website that keeps creating a wordpress folder with an index file, htaccess file and a couple of other files, it also changes the index file and a couple of others.
i keeps changing them back, deleting the generated files, have changed my password several times, use wordfence and Securi neither have flagged any issues, all plugins/theme are up to date, everytime I think it has gone the net day or two things have changed again.
What can I do? My hosting company is absolutely useless, they wont help in the slightest and take over a week to respond to anything.