“to recover your files, kindly send 0.1 BTC to…” ransom note appears on websites

A news report describes an extortion incident where attackers left a ransom note on Naturalsciences.org demanding 0.1 BTC to a specified wallet and instructing victims to post a specific tweet; multiple sites went down and the activity appears linked to a cPanel/WHM vulnerability (CVE-2026-41940). cPanel published patched versions and update instructions, there is evidence of people reposting the attacker’s message but no confirmed widespread payments or recovery of data at the time of reporting.