DragonRank Black Hat SEO Campaign Targeting IIS Servers Across Asia and Europe
An upcoming campaign that aims to manipulate search engine optimization (SEO) ranks across several Asian and European nations has been associated with a "simplified Chinese-speaking actor".
Cisco Talos has dubbed this black hat SEO cluster DragonRank, and its victimology is dispersed over China, Thailand, India, Korea, Belgium, and the Netherlands.
According to security researcher Joey Chen, DragonRank uses vulnerabilities in targets' web application services to create a web shell. It then uses this shell to gather system data, start malware like PlugX and BadIIS, and execute different credential-harvesting programs.
35 Internet Information Services (IIS) servers have been compromised as a result of the attacks read more about DragonRank Black Hat SEO Campaign Targeting IIS Serve...