Have you noticed this "?slince_golden=test" requests on your logs?
It is for a WordPress Backdoor. We wrote a small summary about it here:
trunc.org/learning/slinc…
Seeing it on your logs too?
Trunc Project
@logwithtrunc
A cloud-based log management / SIEM platform for the every day administrators. Simple to use & fair pricing - like google for your logs.
#ossec
