Magento Malware Cleanup & Patch

I need a security-minded Magento specialist to remove every trace of malicious code from my store and then bring the platform fully up to date with the 2.4.8 security patches. I haven’t attempted any fixes myself yet, so you’ll be starting with an untouched environment that still shows the symptoms of infection.

The site runs Magento 2 with a few third-party extensions and some light custom code. Your job is to:

• Identify and clean all malware across core files, themes, and the extension folders, without breaking existing functionality.
• Patch and install Magento 2.4.8 security patches version, confirming that all included security updates are applied.
• Test the store end-to-end—checkout, admin panel, cron jobs, and the custom modules—to be sure everything still works once the cleanup and upgrade are complete.
• Provide a brief after-action report summarising what you found, which files were modified, and any preventive steps I should follow.

Please bring solid Magento 2 experience, comfort with SSH, composer, and backups, plus a methodical approach to security hardening.