Some time ago until now, my web hosting was attacked by online gambling malware and DDoS (they can create/place their files in my cPanel folders, there were also added scripts in several index.php or .htaccess files)
how can i fix this?

I have directed DNS to Cloudflare by activating IPv6 and makes ipv4 null route, but it is still attacked by the malware.