hacked

How to tell if your WordPress site is hacked, and what to do in the first ten minutes

Eleven signs, from the obvious redirect to the quiet ones that only Google notices, then the short list of things to do before you touch anything, so the evidence survives and the cleanup actually sticks.