Tag: webserver

1 Attack Reports | 0 Vulnerabilities

Attack reports

Case of Malware Distribution Linking to Illegal Gambling Website Targeting Korean Web Server

This report examines a malware strain distributed to web servers in South Korea that redirects users to an illegal gambling site. The threat actor installed a Meterpreter backdoor, a port forwarding tool, and an IIS module malware on a compromised web server. The IIS module inspects HTTP headers an…

iismodulemalware

gamblingredirect

Published: May 8, 2024

Downloadable IOCs: 8

Click here to see more Attack Reports