A wave of cyberattacks exploiting vulnerabilities in Microsoft Internet Information Services (IIS) servers, employing BadIIS malware, was recently identified with links to Chinese-speaking groups. The attackers have manipulated SEO rankings, distributed malicious content, and redirected users to illegal gambling websites or malicious servers. Victims are spread across Asia, with instances beyond this region. The attacks were executed for financial gain, highlighting inadequacies in IIS server security.
![](https://healsecurity.com/wp-content/uploads/2024/11/ransom_g1264284948_01.jpg)
Ransomware hits healthcare, critical services in January
Major ransomware attacks in January targeted healthcare entities, including the New York Blood Center (NYBC) and Maryland’s Frederick Health. As a result, some appointments were