He dug into the file manager via his hosting provider and found the culprit. Hidden deep within the "Clonek Fixed" theme files was a base64-encoded backdoor

MH Magazine is a popular WordPress theme designed for online magazines, blogs, and news websites. However, some users may opt for nulled or cloned versions of the theme to avoid costs. While we understand the cost-saving aspect, we also prioritize website security and performance. Our enhanced feature for MH Magazine aims to bridge the gap by offering additional security measures and performance optimizations for users who choose or already use a nulled, cloned, or fixed version of the theme.

However, I can help you draft for someone who wants to use MH Magazine (the real version) or find an affordable/free alternative.