+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: Chinese Cybercrime Group Runs Global SEO Fraud Ring Using Compromised IIS Servers (/showthread.php?tid=6311184)
Chinese Cybercrime Group Runs Global SEO Fraud Ring Using Compromised IIS Servers - Stanley - Oct 14, 2025
Chinese Cybercrime Group Runs Global SEO Fraud Ring Using Compromised IIS Servers
Cybersecurity researchers have shed light on a Chinese-speaking cybercrime group codenamed UAT-8099 that has been attributed to search engine optimization (SEO) fraud and theft of high-value credentials, configuration files, and certificate data.
The attacks are designed to target Microsoft Internet Information Services (IIS) servers, with most of the infections reported in India, Thailand
https://thehackernews.com/2025/10/chinese-cybercrime-group-runs-global.html
RE: Chinese Cybercrime Group Runs Global SEO Fraud Ring Using Compromised IIS Servers - Oh_Well - Oct 14, 2025
That's definitely some pressure for Microsoft xD
RE: Chinese Cybercrime Group Runs Global SEO Fraud Ring Using Compromised IIS Servers - DAL-SHA - Oct 15, 2025
(Oct 14, 2025 11:36 PM)Oh_Well Wrote: That's definitely some pressure for Microsoft xD
Especially for the heads of the departments in microsoft !! only thailand and india being targeted sends a specific message 👍
RE: Chinese Cybercrime Group Runs Global SEO Fraud Ring Using Compromised IIS Servers - plops - Oct 15, 2025
Thats pretty crazy and indepth. They even work to keep out other threat actors lol
RE: Chinese Cybercrime Group Runs Global SEO Fraud Ring Using Compromised IIS Servers - Hackers - Oct 15, 2025
(Oct 15, 2025 06:03 PM)plops Wrote: Thats pretty crazy and indepth. They even work to keep out other threat actors lol
makes sense haha
It sounds like they sell the compromised systems and use them for these backlink networks...
It makes me think that there could be an easy to find signature for vulnerable systems. The attention on closing the back door makes me wonder if it's simple to find
RE: Chinese Cybercrime Group Runs Global SEO Fraud Ring Using Compromised IIS Servers - Tyr - Oct 15, 2025
Poor secdevop teams prob tairing their hair out rn
RE: Chinese Cybercrime Group Runs Global SEO Fraud Ring Using Compromised IIS Servers - leste - Oct 30, 2025
SEO fraud and credential theft. That's very efficient.