Must-Use Plugin (mu-plugin)

A WordPress plugin placed in the wp-content/mu-plugins directory, which loads automatically before normal plugins, cannot be deactivated from the admin interface, shows only under a separate Must-Use tab, and receives no update notifications. Malware uses the directory for quiet persistence.