tech ๐ค Chinese hackers use AI to compromise web servers
A Chinese-speaking cybercrime group, tracked as UAT-10147, is exploiting vulnerable web servers globally to deploy BadIIS malware. Victims across Brazil, Bolivia, China, Canada, and Vietnam include various sectors like government and tech. The attackers leveraged exploits like Zimbra CVE-2022-27925 and used AI-assisted tooling for their operations. On Windows, they use scripts to escalate privileges and deploy RATs, while on Linux, they deploy backdoors. Organizations must patch systems quickly and audit for suspicious activity to defend against this evolving threat. ๐ค