Follow your incident response plan, isolate the compromised site, remove malware, and implement additional security measures to prevent future incidents.