A China-linked hacking group is quietly living inside Microsoft IIS servers

https://fed.brid.gy/r/https://nerds.xyz/2026/06/china-linked-op512-iis-hackers/

China-Linked OP-512 Targets IIS Servers with Custom Web Shells

Meet OP-512, a China-linked threat cluster with a taste for espionage, recently caught targeting IIS servers with custom web shells in a stealthy bid for sensitive intel. This sneaky operation aligns with China's intelligence priorities, putting certain sectors and geographies firmly in its crosshairs.

https://osintsights.com/china-linked-op-512-targets-iis-servers-with-custom-web-shells?utm_source=mastodon&utm_medium=social

#ChinalinkedEspionage #IisServers #CustomWebShells #Op512 #NationState

China-Linked OP-512 Targets IIS Servers with Custom Web Shells

Discover how OP-512 targets IIS servers with custom web shells for espionage. Learn more about this China-linked threat and protect your organization now.

OSINTSights