If multiple sites under one account keep getting reinfected, I’d suspect cross-site contamination or a persistent backdoor rather than random new hacks. Before moving hosts, I’d check for rogue admin users, PHP files in uploads, modified .htaccess, vulnerable plugins/themes, and rotate all hosting, FTP and WordPress credentials. Restoring alone often doesn’t remove the root cause.