Security experts have identified 'DragonRank', a Chinese-origin activity cluster targeting IIS servers, manipulating SEO and deploying sophisticated malware across various sectors.
DragonRank shows similarities to Chinese hacker tactics, targeting IIS servers across diverse industries, utilizing web shells for system information and malware deployment.
The group primarily implants BadIIS malware to disrupt SEO by exploiting web application vulnerabilities, attacking over 35 IIS servers in multiple sectors.
Using techniques like DLL sideloading and user cloning, DragonRank maintains persistent access to compromised networks and mimics administrator permissions for stealth.
[
Collection
]
[
|
...
]