Quote:
Originally Posted by magneto664
it could well be installed a year ago as well as a month ago. it remains to scan all files and the database. It is worth to rip the original files from the server (wordprees main files) and files from the original wordpress and compare if they are not changed! remember about the wp-config file 
shit work for a few hours |
This is very true.
These exploits can remain dormant for months, even years. Then a particular event triggers them in action and boom.