Tag

Ghostredirector

All articles tagged with #ghostredirector

cybersecurity4 months ago•4 min saved

GhostRedirector: A New China-Aligned Threat Targeting Windows Servers for SEO Fraud

Cybersecurity researchers uncovered GhostRedirector, a threat group targeting at least 65 Windows servers mainly in Brazil, Thailand, and Vietnam, using a passive backdoor called Rungan and an IIS module named Gamshen to conduct SEO fraud and maintain long-term access, with suspected links to China.

via The Hacker News|

#cybersecurity #gamshen-iis-module #ghostredirector

cybersecurity4 months ago•21 min saved

GhostRedirector: A New China-Aligned Threat Targeting Windows Servers

ESET researchers uncovered GhostRedirector, a China-aligned threat actor that compromised at least 65 Windows servers mainly in Brazil, Thailand, and Vietnam, using custom tools like the passive backdoor Rungan and the malicious IIS module Gamshen to facilitate SEO fraud and maintain persistent access, with activities dating back to at least August 2024.

via WeLiveSecurity|

#backdoor #cybersecurity #ghostredirector