Hackers Hijacking IIS Servers Using Malicious BadIIS Module to Serve Malicious Content

Leveraging a native IIS module named BadIIS, attackers manipulated search engine crawler traffic to poison search results and redirect legitimate users to scam.