#IIS

Vulnerability/Target

2023-05-17 • 윈도우 IIS 웹 서버를 노리는 Lazarus 그룹

IIS is a Windows web-server platform whose worker process is w3wp.exe. Lazarus targeted poorly managed or vulnerable IIS servers as initial access points, then used the server process to place a legitimate application beside a malicious DLL and execute the payload through DLL side-loading.

Tagged Reports

« Back