Defender scan didn’t pick up the malware in the system. WordFence was able to pick it up. However, Sucuri failed to detect it too.
[attachments are only viewable by logged-in members]
WordFence scan:
[attachments are only viewable by logged-in members]
[attachments are only viewable by logged-in members]
[attachments are only viewable by logged-in members]
The Defender Scan was taking too much resources in the CPU in live site, and the host shut it down. The above scan was re-run in the cloned version on a localhost to bring this into our attention, hence no access to live site at the moment.
If needed, infected Visual Composer plugin is attached via the chat notes.