"DragonRank Black Hat SEO Campaign Targeting IIS Servers Across Asia and Europe"

A "simplified Chinese-speaking actor" is linked to a new Search Engine Optimization (SEO) rank manipulation campaign targeting countries in Asia and Europe. Cisco Talos calls the black hat SEO cluster "DragonRank," which has victims in Thailand, India, Korea, Belgium, the Netherlands, and China. According to security researcher Joey Chen, DragonRank exploits targets' web application services to deploy a web shell, which is then used to collect system information and launch malware. The attacks have resulted in the compromise of 35 Internet Information Services (IIS) servers, with the ultimate goal of deploying the "BadIIS" malware. This article continues to discuss findings regarding the DragonRank black hat SEO campaign.

THN reports "DragonRank Black Hat SEO Campaign Targeting IIS Servers Across Asia and Europe"

Submitted by grigby1