Hey, I am following this to see if anyone ever found resolution here. I’ve had the EXACT same issue for some time, and do the same daily thing of cleaning the wp_config.php and the index.php file. (and other junk files). Has anyone found out how they are doing this to be able to stop it. I also see the permissions change as well, all the same stuff, but no idea how they are doing it.
