My Magento site redirects to spam, what is it?

A spam redirect almost always means your store has been hacked and an attacker injected malicious code. On Magento 2 the redirect usually hides in injected JavaScript, a poisoned CMS block or layout-XML update, a rogue config row in the database, or a modified core file. It often only triggers for visitors arriving from Google or on mobile, so it looks fine to you while it’s costing you traffic and trust. Magento malware removal finds the injection at the source and closes the backdoor that allowed it.