Threat Actor
Group 9
- First Reported
- Sep 10, 2024
- Latest Reported
- Sep 10, 2024
Reported Context (1)
- Talos assesses with medium confidence that the BadIIS observed in this campaign is associated with the entity called Group 9 in a Black Hat USA 2021 presentation. DragonRank Compromises IIS Servers to Deploy PlugX and BadIIS for SEO Fraud
Malware (2)
People (1)
Threat Actors (1)
MITRE ATT&CK (14)
Vendors (1)
Products (12)
Tools (8)
Industries (13)
Countries (6)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.