From PDB strings to MaaS: Tracking a commodity BadIIS ecosystem used by ChineseCisco Talos·May 19, 10:00 UTC · May 19, 2026Malware130
Dissecting UAT-8099: New persistence mechanisms and regional focusCisco Talos·Jan 29, 11:00 UTC · Jan 29, 2026Malware55
China-Linked UAT-8099 Targets IIS Servers in Asia with BadIIS SEO MalwareThe Hacker News·Feb 20, 11:40 UTC · Feb 20, 2026Malware30
BadIIS Malware Spreads via SEO Poisoning — Redirects Traffic, Plants Web ShellsThe Hacker News·Sep 23, 08:13 UTC · Sep 23, 2025Malware30
DragonRank Exploits IIS Servers with BadIIS Malware for SEO Fraud and Gambling RedirectsThe Hacker News·Feb 10, 15:08 UTC · Feb 10, 2025Malware30
BadIIS Malware Exploits IIS Servers for SEO FraudInfosecurity Magazine·Feb 10, 17:15 UTC · Feb 10, 2025Malware55
⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & MoreThe Hacker News·Nov 24, 12:32 UTC · Nov 24, 2025Malware in the wildCVE-2025-58034CVE-2025-64446CVE-2025-13223+12 CVEs60
We can try to bridge the cybersecurity skills gap, but that doesn’t necessarily mean more jobs for defendersCisco Talos·Sep 12, 18:00 UTC · Sep 12, 2024Malware55
Webworm Deploys EchoCreep and GraphWorm Backdoors Using Discord and MS Graph APIThe Hacker News·May 21, 10:41 UTC · May 21, 2026Malware142
New Threat Cluster OP-512 Targets Microsoft IIS Servers with Custom Web Shell FrameworkThe Hacker News·Jun 5, 13:49 UTC · Jun 5, 2026Malware30
GhostRedirector Hacks 65 Windows Servers Using Rungan Backdoor and Gamshen IIS ModuleThe Hacker News·Sep 5, 06:07 UTC · Sep 5, 2025Malware42