Q1 2026 malware statistics report for Windows web servers

Analysis of Windows web server attacks during Q1 2026 reveals that Internet Information Services (IIS) and Apache Tomcat servers face persistent threats through web shell exploitation. The Larva-26001 threat actor has been targeting domestic IIS servers for several years, deploying privilege escalation tools including JuicyPotato, BadPotato, and exploiting CVE-2019-1458. Following privilege escalation, attackers utilize port-forwarding tools like HTran and PortTranC to redirect traffic to RDP port 3389, enabling remote control of compromised systems. Attack vectors include file upload vulnerabilities, Web Framework-WAS vulnerabilities, and unpatched RCE services. Additional malicious activities involve deployment of backdoors, CoinMiners, and proxy tools for internal network compromise.

Pulse ID: 69de008da466f2dc89165990
Pulse Link: https://otx.alienvault.com/pulse/69de008da466f2dc89165990
Pulse Author: AlienVault
Created: 2026-04-14 08:53:33

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#APAC #Apache #BackDoor #CoinMiner #CyberSecurity #ICS #InfoSec #Malware #OTX #OpenThreatExchange #Proxy #RCE #RDP #Tomcat #Windows #bot #AlienVault

apparently tomcat's strategy for enabling pqc is to use two different ssl keys, a normal one (only rsa is mentioned in the documentation page, but i guess ec would work as well?), and an enormous ml-dsa-65 one for a hybrid pqc configuration: https://tomcat.apache.org/tomcat-10.1-doc/ssl-howto.html#Post_Quantum_Cryptography

openssl 3.5 and higher can be used to generate mldsa65 keys and stuff them and the certificate into a pkcs12 pfx file for use with tomcat, but i'm not certain which cert authorities will sign a mldsa65 certificate, if any of them support it yet

#apache #tomcat #pqc #openssl

🔥 JBoss/WildFly ou Apache Tomcat: Qual Escolher? 🖥️

Está em dúvida entre esses dois servidores? Ambos têm suas vantagens, mas qual é o ideal para seu projeto? Entenda as diferenças e descubra qual atenderá melhor às suas necessidades!

👉 Leia no blog: https://nova.escolalinux.com.br/blog/jboss-wildfly-ou-apache-tomcat-qual-devo-escolher?utm_source=dlvr.it&utm_medium=mastodon

#Tecnologia #Servidores #Java #Tomcat #JBoss #WildFly

F-14 Tomcat : genèse, échecs et renaissance d’un chasseur hors norme - https://www.youtube.com/watch?v=t6d656B0X24

> Le F-14 Tomcat est devenu une légende… mais son histoire commence par un échec retentissant. Du fiasco du F-111B aux combats en Iran et en Irak, en passant par la Navy et ses évolutions techniques, Frédéric Marsaly revient sur le destin hors norme de cet avion mythique.

Fabuleuse émission ! <3

#f14 #tomcat #grumman #aviation

Descubra o Poder do Tomcat: 5 Razões para Usar! 🚀

Pensando em otimizar seu servidor web? O Tomcat é a escolha perfeita! Com sua leveza e flexibilidade, ele se destaca no mundo do open source. Confira 5 motivos para adotar o Tomcat e leve sua infraestrutura de TI a um novo patamar. Vamos inovar juntos?

👉 Leia mais no blog: https://nova.escolalinux.com.br/blog/tomcat-5-motivos-para-voce-comecar-a-usar?utm_source=dlvr.it&utm_medium=mastodon

#Tomcat #ServidorWeb #OpenSource #Inovação #Tecnologia

🔥 JBoss/WildFly ou Apache Tomcat: Qual Escolher? 🖥️

Está em dúvida entre esses dois servidores? Ambos têm suas vantagens, mas qual é o ideal para seu projeto? Entenda as diferenças e descubra qual atenderá melhor às suas necessidades!

👉 Leia no blog: https://nova.escolalinux.com.br/blog/jboss-wildfly-ou-apache-tomcat-qual-devo-escolher?utm_source=dlvr.it&utm_medium=mastodon

#Tecnologia #Servidores #Java #Tomcat #JBoss #WildFly