
A highly sophisticated campaign has been uncovered, revealing how a state-sponsored hacking group is transforming compromised servers from passive targets into active components of its own attack infrastructure. Research into the activities of a Chinese threat actor, known variously as Ink Dragon, Earth Alux, or REF7707, details the use of a custom-built Internet Information Services (IIS) module to create a










