Urgent Magento Recovery & Hardening

My Magento store is hosted on a CyberPanel / contabo VPS and it is completely offline after a confirmed hack. The hosting provider alerted me to malicious activity; a few minutes later every frontend and admin URL went dead, so I cannot even confirm whether we run Magento 1 or 2 from the browser anymore.

I need you to jump in right away, trace and remove any injected code or files, bring the shop back online, and then lock it down so this does not happen again. That means: cleaning the Magento core, modules and database, restoring any corrupted system files, patching to the latest stable version, tightening permissions, configuring Web Application Firewall rules on CyberPanel, and setting up ongoing malware and integrity monitoring. A concise hand-over report listing what you found, what you fixed, and the hardening steps you implemented will be required before we close the project.

Please reply only if you have solid, hands-on experience with Magento incident response, SSH-level troubleshooting on LiteSpeed/CyberPanel, and server security best practices. Highlight similar recoveries you have handled; no lengthy proposals—your relevant experience is what matters.