https://blog.wpsec.com/finding-php-and-wordpress-backdoors-using-antivirus-and-indicator-of-compromise/