A wave of cyberattacks exploiting vulnerabilities in Microsoft Internet Information Services (IIS) servers, employing BadIIS malware, was recently identified with links to Chinese-speaking groups. The attackers have manipulated SEO rankings, distributed malicious content, and redirected users to illegal gambling websites or malicious servers. Victims are spread across Asia, with instances beyond this region. The attacks were executed for financial gain, highlighting inadequacies in IIS server security.
Ransomware attackers turn to workers for data breach access
Ransomware attackers are encouraging employees to infect their employers’ networks with viruses, according to security vendor GroupSense. The appeal is made in ransomware notifications and
