OilRig uses RGDoor IIS Backdoor on Targets in the Middle EastPalo Alto Unit 42·Nov 1, 11:00 UTC · Nov 1, 2018Malware42
Protecting Your Microsoft IIS Servers Against Malware AttacksThe Hacker News·Sep 8, 12:56 UTC · Sep 8, 2023Malware42
The SessionManager IIS backdoor: a possibly overlooked GELSEMIUM artefactKaspersky Securelist·Jun 30, 08:00 UTC · Jun 30, 2022Malware42
Millions of Microsoft web servers powered by vulnerable legacy softwareSecurity Affairs·Sep 9, 14:31 UTC · Sep 9, 2021Vulnerability55
Several Malware Families Targeting IIS Web Servers With Malicious ModulesThe Hacker News·Aug 6, 05:11 UTC · Aug 6, 2021Malware42
Palo Alto Networks Discloses New Attack Surface Targeting Microsoft IIS and SQL Server at Black Hat Asia 2021Palo Alto Unit 42·Jun 6, 12:18 UTC · Jun 6, 2024VulnerabilityCVE-2021-2845535
Hackers are abusing IIS extensions to establish covert backdoorsSecurity Affairs·Jul 27, 20:18 UTC · Jul 27, 2022Malware55
UAT-8099: Chinese-speaking cybercrime group targets highCisco Talos·Oct 2, 10:00 UTC · Oct 2, 2025Vulnerability42
Anonymous hacked Freedom Hosting II, a Fifth of the Dark Web is downSecurity Affairs·Feb 5, 16:55 UTC · Feb 5, 2017Data breach45
Owowa: the add-on that turns your OWA into a credential stealer and remote access panelKaspersky Securelist·Dec 14, 10:00 UTC · Dec 14, 2021Malware30
Over 8.3 million live websites using IIS 6.0 are affected by a ZeroSecurity Affairs·Aug 22, 21:18 UTC · Aug 22, 2018Exploit / PoC in the wildCVE-2017-726960
Frebniis malware abuses Microsoft IIS feature to create a backdoorSecurity Affairs·Feb 19, 20:22 UTC · Feb 19, 2023Malware42
IIS attacks surge from 2,000 to 1.7 million over last quarterHelp Net Security·Oct 10, 00:00 UTC · Oct 10, 2018Exploit / PoC45
China-Linked UAT-8099 Targets IIS Servers in Asia with BadIIS SEO MalwareThe Hacker News·Feb 20, 11:40 UTC · Feb 20, 2026Malware30
BadIIS Malware Exploits IIS Servers for SEO FraudInfosecurity Magazine·Feb 10, 17:15 UTC · Feb 10, 2025Malware55
Iran-linked APT OilRig target IIS Web Servers with new RGDoor BackdoorSecurity Affairs·Feb 4, 17:23 UTC · Feb 4, 2018Malware42
With great Azure VM comes great responsibility (which is why you really want an Azure Web Site)Troy Hunt·Jan 22, 00:00 UTC · Jan 22, 2014Vulnerability55
You're deploying it wrong! TeamCity, Subversion & Web Deploy part 3: Publishing with Web DeployTroy Hunt·Nov 24, 00:00 UTC · Nov 24, 2010Industry30
Intel unveils Horse Ridge II, a cryogenic quantum control chipHelp Net Security·Dec 7, 00:00 UTC · Dec 7, 2020Industry55
Pentagon Suspends CMMC Phase II Requirements for Defense ContractorsInfosecurity Magazine·Jul 14, 15:28 UTC · Jul 14, 2026Industry55
New Threat Cluster OP-512 Targets Microsoft IIS Servers with Custom Web Shell FrameworkThe Hacker News·Jun 5, 13:49 UTC · Jun 5, 2026Malware30
INTERPOL: Operation Synergia II disrupted +22,000 malicious IPsSecurity Affairs·Nov 7, 06:42 UTC · Nov 7, 2024Ransomware57
BAE Systems Viper MLV II reduces F-16 aircraft vulnerability to cyberattacksHelp Net Security·Oct 14, 00:00 UTC · Oct 14, 2022Vulnerability55
SCADA Honeywell XL Web II Controller exposed password in clear textSecurity Affairs·Feb 6, 06:59 UTC · Feb 6, 2017Vulnerability55
Chinese Cybercrime Group Runs Global SEO Fraud Ring Using Compromised IIS ServersThe Hacker News·Oct 6, 11:36 UTC · Oct 6, 2025Phishing & fraud42
GhostRedirector Hacks 65 Windows Servers Using Rungan Backdoor and Gamshen IIS ModuleThe Hacker News·Sep 5, 06:07 UTC · Sep 5, 2025Malware42
Frebniis Malware Exploits Microsoft IIS FeatureInfosecurity Magazine·Feb 20, 16:00 UTC · Feb 20, 2023Malware55
Vulnerability in time-syncing software puts a ton of corporate networks at riskThe Record·Jan 26, 00:00 UTC · Jan 26, 2023Vulnerability30
PoC released for wormable Windows IIS bugThe Record·Dec 21, 00:00 UTC · Dec 21, 2022Exploit / PoCCVE-2021-3116660
Praying Mantis APT targets IIS servers with ASP.NET exploitsThe Record·Dec 10, 00:00 UTC · Dec 10, 2022VulnerabilityCVE-2021-27852CVE-2019-18935CVE-2017-1131747
Crooks are using lures related to Her Majesty Queen Elizabeth II in phishing attacksSecurity Affairs·Sep 15, 05:22 UTC · Sep 15, 2022Phishing & fraud42
SessionManager Backdoor employed in attacks on Microsoft IIS serversSecurity Affairs·Jul 1, 20:24 UTC · Jul 1, 2022Malware42
Hackers Using Malicious IIS Server Module to Steal Microsoft Exchange CredentialsThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2021Malware42
Expert found a DoS flaw in Windows Servers running IISSecurity Affairs·Feb 22, 06:24 UTC · Feb 22, 2019Advisory30
Actively exploited zero-day in IIS 6.0 affects 60,000+ serversHelp Net Security·Mar 30, 00:00 UTC · Mar 30, 2017Exploit / PoC in the wildCVE-2017-726960
From PDB strings to MaaS: Tracking a commodity BadIIS ecosystem used by ChineseCisco Talos·May 19, 10:00 UTC · May 19, 2026Malware30
DragonRank, a Chinese-speaking SEO manipulator service providerCisco Talos·Sep 10, 04:00 UTC · Sep 10, 2024Vulnerability42
Massive online crime crackdown leads to 1,000 arrestsHelp Net Security·Nov 30, 00:00 UTC · Nov 30, 2021Malware55
HAEICHI-II: Interpol arrested +1,000 suspects linked to various crimesSecurity Affairs·Nov 27, 13:29 UTC · Nov 27, 2021Policy & legal30