Tag: remote command execution

1 Attack Reports | 0 Vulnerabilities

Attack reports

IIS servers owned by RudePanda like it's 2003

A new malicious IIS module called 'HijackServer' has been detected compromising IIS servers by exploiting exposed ASP .NET machine keys. The attackers use a customized rootkit and ready-made tools to gain persistent access. While primarily aimed at search engine optimization for cryptocurrency scam…
rootkit
cryptocurrency
iis
seo
2025-10-22
remote command execution
wingtbcli
hijackserver
asp .net
hijackdrivermanager
Published: October 22, 2025
Downloadable IOCs: 36
Click here to see more Attack Reports