Cisco Talos has identified a new, regionally targeted campaign by UAT-8099 that leverages advanced persistence techniques and custom BadIIS malware variants to compromise IIS servers, particularly in Thailand and Vietnam.
First seen on blog.talosintelligence.com
Jump to article: blog.talosintelligence.com/uat-8099-new-persistence-mechanisms-and-regional-focus/
![]()

