[Stanley]

Chinese Cybercrime Group Runs Global SEO Fraud Ring Using Compromised IIS Servers

Cybersecurity researchers have shed light on a Chinese-speaking cybercrime group codenamed UAT-8099 that has been attributed to search engine optimization (SEO) fraud and theft of high-value credentials, configuration files, and certificate data. 
The attacks are designed to target Microsoft Internet Information Services (IIS) servers, with most of the infections reported in India, Thailand

https://thehackernews.com/2025/10/chines...lobal.html

[Oh_Well]

That's definitely some pressure for Microsoft xD

[DAL-SHA]

That's definitely some pressure for Microsoft xD

Especially for the heads of the departments in microsoft !! only thailand and india being targeted sends a specific message 👍

[plops]

Thats pretty crazy and indepth. They even work to keep out other threat actors lol

[Hackers]

Thats pretty crazy and indepth. They even work to keep out other threat actors lol

makes sense haha
It sounds like they sell the compromised systems and use them for these backlink networks...

It makes me think that there could be an easy to find signature for vulnerable systems. The attention on closing the back door makes me wonder if it's simple to find

[Tyr]

Poor secdevop teams prob tairing their hair out rn

[leste]

SEO fraud and credential theft. That's very efficient.