New redirect hacking

Hi,

I am a professional webmaster and 3 of my customers are impacted by a new redirect hack since Monday, February the 22nd 12:30AM Paris time.

This hacking redirects websites to https://for.dontkinhooot.tw.

I have managed to fix the issue on front end but the hacking still is active on wp-admin.

The malicious code has probably been introduced in the database days defore.

Neither Imunify AV not malcare.com detects the malware.

Does someboy experience the same problem ?

Thanks in advance for your help.