Custom .htaccess Rules

I recently dealt with a persistent malware infection affecting dozens of WordPress websites hosted under a single cPanel account. The affected sites were protected by Imunify360, ModSecurity, Wordfence and custom .htaccess rules. Standard WordPress permissions were also in place: Despite these measures, new files and directories continued to appear. Existing files were overwritten, wp-content permissions…