Take your site down immediately

If possible, take your site down as soon as you can. This will prevent someone landing on your site from being infected by any malware the hackers may have embedded into your site.