UAT-8099 Target Vulnerable IIS Servers Via PowerShell & Region-Customized BadIIS
https://cybersecuritynews.com/uat-8099-targets-vulnerable-iis-servers/
A new wave of targeted attacks has emerged against Internet Information Services (IIS) servers across Asia, with threat actors deploying sophisticated malware designed to compromise vulnerable systems.
The campaign, active from late 2025 through early 2026, focuses primarily on victims in Thailand and Vietnam, marking a strategic shift toward region-specific operations.
https://stacker.news/items/1423394
ch0k1 / ch0k1 🇧🇬☦️
npub1k3…q9t9m
2026-01-31 14:35:35 UTC
Author Public Key
npub1k3qrkfq45qsvyp53hvvv2xk6tt9kfdca9asfvm9nc796dq65948q9q9t9mSeen on
wss://nos.lolPublished at
2026-01-31 14:35:35 UTCEvent JSON
{
"id": "5639f25a250f075f188f40d4065713dbf39a06250525d06bbc6d12648734716d",
"pubkey": "b4403b2415a020c20691bb18c51ada5acb64b71d2f60966cb3c78ba683542d4e",
"created_at": 1769870135,
"kind": 1,
"tags": [
[
"client",
"stacker.news"
]
],
"content": "UAT-8099 Target Vulnerable IIS Servers Via PowerShell \u0026 Region-Customized BadIIS\nhttps://cybersecuritynews.com/uat-8099-targets-vulnerable-iis-servers/\n\nA new wave of targeted attacks has emerged against Internet Information Services (IIS) servers across Asia, with threat actors deploying sophisticated malware designed to compromise vulnerable systems.\n\nThe campaign, active from late 2025 through early 2026, focuses primarily on victims in Thailand and Vietnam, marking a strategic shift toward region-specific operations.\n\nhttps://stacker.news/items/1423394",
"sig": "75607e5a29eb5d1d4f3714bea0e498f6327341fdcc6e8768c5cf7b05303552feba0b342ac9c9e945521a8f8e0d36d2da48c787c6cc1d0baa898e1c018984dce2"
}