Search as a 4 or 5 star security plug-in that says it hides at the very least , the "htaccess" and "wp-config" files.
Then continue reading this article because I may have a little insight about them. Yes, may as simple as the idea.