A large-scale cyberattack identified in 2024, known as “BadIIS”, targets IIS servers worldwide, particularly in Asia. Cybercriminals install the malware to manipulate website content and redirect users to fraudulent platforms. Infected regions include India, Thailand, Vietnam, the Philippines, Singapore, Taiwan, South Korea, Japan, and Brazil, with government agencies, universities, tech firms, and telecoms severely affected. Evidence suggests Chinese-speaking hacker groups are behind the operation. Countermeasures include regular patches and strict access controls.

New Zhong Stealer Malware Exploit Zendesk to Attack Fintech and Cryptocurrency
Researchers have discovered a new malware, named “Zhong Stealer,” which poses a threat to the fintech and cryptocurrency industries. The malware uses customer support platforms