Wordpress site hacked. How to remove redirects to phishing sites?

Question

Phishing

Good day. This morning we received reports from users that all three of our sites were broken. Case history:
Created two accounts with administrator rights.
When entering the site, it redirects to phishing sites.
Site with example autoamber.ru
How to remove redirects?

Answer 1

How to remove: restore from backup)) Clean longer.
How to protect yourself: file permissions, login from certain ip, protection plugins, ..
If VPS, then you can think of a lot of things.

Answer 2

For the sake of interest, show the screen of the page with installed plugins,
I have long wanted to update my blacklist of crooked products ...

Answer 3

A similar situation happened to me the other day, I added a separate question with all the details and screenshots. I would be grateful for any good advice.