TGTGInsighttelegram intelligenceLIVE / telegram public index
TGINSIGHT POST
Post #8318
@thehackernews
The Hacker News
Post content
Post content
China-linked UAT-8099 targets IIS servers in Asia using BadIIS SEO malware. The group broke into vulnerable IIS servers, mainly in Thailand and Vietnam, using web shells and PowerShell. The aim remains SEO fraud, now tuned by region. 🔗 Read → https://thehackernews.com/2026/01/china-linked-uat-8099-targets-iis.html