DragonRank Targets IIS Servers for SEO Manipulation
/ 1 min read
🀄️ DragonRank targets IIS servers in Asia for SEO manipulation and malware installation. A recent Trend Micro analysis reveals that threat actors are exploiting Internet Information Services (IIS) servers across several Asian countries, including India and Japan, to deploy BadIIS malware as part of a financially motivated SEO manipulation campaign. This campaign redirects users to illegal gambling sites and connects them to rogue servers for malware distribution. The activity is linked to a Chinese-speaking group known as DragonRank, which has previously been associated with similar tactics. Additionally, the Funnull content delivery network has been implicated in infrastructure laundering, renting IP addresses from major providers to host criminal activities, including phishing and money laundering schemes.
