Your website was hacked and get this message "to recover your files, kindly send 0.1 BTC to bc1q9nh4revv6yqhj2gc5usncrpsfnh7ypwr9h0sp2 and tweet ty15b6TOTuBuzUhfypJeagHl4e2sAs26, then we will help u <3" .
INSTRUCTIONS
1.-DONT PAY NOTHING THEY DONT COMEBACK YOUR FILES AND YOUR MONEY DONT COMEBACK NOTHING
2.-TALK WITH YOUR PROVIDER HOSTING , HE CAN COMEBACK YOUR WEBSITE AND GIVE YOU A BACKUP OF YOUR FILES WITHOUT PAY.
3.- PATCH YOUR HOSTING
Option 1: Update your kernel (recommended)
For Ubuntu/Debian:Β sudo apt update, sudo apt upgrade -y
For RHEL-based systems: sudo yum update
Then reboot your server.
Option 2: Disable the affected module (temporary fix)
If updating right now isn't an option, disable the vulnerable module to reduce exposure:
echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf rmmod algif_aead 2>/dev/null || true
This won't affect SSH, TLS, LUKS, or OpenSSL.