Tag: web server compromise

1 Attack Reports | 0 Vulnerabilities

Attack reports

BADIIS to the Bone: New Insights to a Global SEO Poisoning Campaign

A Chinese-speaking cybercrime group, REF4033, has orchestrated a massive SEO poisoning campaign, compromising over 1,800 Windows web servers worldwide using the BADIIS malware. The campaign operates in two phases: serving keyword-stuffed HTML to search engine crawlers and redirecting victims to ill…
seo poisoning
iis module
search engine manipulation
badiis
2026-02-17
chinese cybercrime
traffic redirection
vice economy
web server compromise
Published: February 17, 2026
Downloadable IOCs: 28
Click here to see more Attack Reports