Significantly expanded
Chapter 16: SC 4.0.3 Self-Healing WordPress Malware
- Expanded the service-worker investigation to show how browser persistence can survive an otherwise clean-looking server response.
- Added clearer coverage of long-running server and PHP processes that can retain or restore malicious behavior after files are removed.
- Strengthened the persistence map across browser, process, filesystem, WordPress, database, and hosting layers.
- Clarified why coordinated containment and cleanup are necessary when multiple layers can restore one another.
This continuing revision work keeps the book aligned with real malware behavior instead of treating the first release as the final word.