tldrdailynews.com logo

GhostRedirector: A New China-Aligned Threat Targeting Windows Servers

1 min read
Source: WeLiveSecurity
GhostRedirector: A New China-Aligned Threat Targeting Windows Servers
Photo: WeLiveSecurity
TL;DR

ESET researchers uncovered GhostRedirector, a China-aligned threat actor that compromised at least 65 Windows servers mainly in Brazil, Thailand, and Vietnam, using custom tools like the passive backdoor Rungan and the malicious IIS module Gamshen to facilitate SEO fraud and maintain persistent access, with activities dating back to at least August 2024.

Topics:technologycybersecurity#backdoor#cybersecurity#ghostredirector#iis-module#seo-fraud#windows-servers
Share this article
  1. GhostRedirector poisons Windows servers: Backdoors with a side of Potatoes  WeLiveSecurity
  2. GhostRedirector Hacks 65 Windows Servers Using Rungan Backdoor and Gamshen IIS Module  The Hacker News
  3. New China-aligned crew poisons Windows servers for SEO fraud  theregister.com
  4. New threat group uses custom tools to hijack search results  Help Net Security
  5. GhostRedirector Emerges as New China-Aligned Threat Actor  Infosecurity Magazine

Want the full story? Read the original reporting

Read on WeLiveSecurity