Stay calm and avoid making unnecessary changes. Your first priority should be to determine the extent of the compromise. Preserve any available backups, contact your hosting provider or website security specialist, and begin investigating the source of the attack before attempting repairs.
