WordPress “Anonymous Fox” virus port mortem

Here are notes from a malware investigation, of which I would later learn goes by “Anonymous Fox”, the supposed pseudonym of the malware author. Here’s notes from the timeline: Earliest logs The logs begin at the end of August 2020, although unfortunately it’s likely the compromise occurred earlier. A successful request for a questionable sitemap […]
oko
friend