Miguel #1

Hi, for the last week, my VPS has been infected multiple times with a monero mining script, it had some persistance and some scripts to make it seem buggy while trying to log in but I managed to clean it; It was not a SSH hack, but attackers were able to install and configure a monero mining script repeateadly, and it only stopped when I firewalled port 8090.
It had added a script to root login that disguised as a problem diagnostic while waiting for a password.
I've even updated the OS and Cyberpanel but it kept coming back.

Please fix this, I didn't have time to migrate to a new VPS but this can't keep going.