SEO Poisoning Campaign Tied to Chinese Actor
SEO Poisoning Campaign Tied to Chinese Actor Summary Researchers at Palo Alto Networks Unit 42 uncovered an SEO poisoning campaign, active since March 2025, that uses a malicious native IIS module called BadIIS to intercept and alter web traffic on compromised servers. Tracked as CL-UNK-1037 and nicknamed “Operation Rewrite”, the campaign hijacks legitimate websites (often […]