‘Frebniis’ Malware Hijacks Microsoft IIS Function to Deploy Backdoor

AuroraZero

This is interesting to me anyways.

it seems the malware injects code into a DLL that an IIS feature called Failed Request Event Buffering (FREB) uses when troubleshooting failed requests.

‘Frebniis’ Malware Hijacks Microsoft IIS Function to Deploy Backdoor

Encoders

https://www.securityweek.com/frebniis-malware-hijacks-microsoft-iis-function-to-deploy-backdoor/

buzz off with your ip grabber mate :^)

jk, putting that aside, it's been a decade since i used IIS
also, if you're still using http for nothing but text transfer, you're asking for it

jmgcaguicla

@Encoders said:
also, if you're still using http for nothing but text transfer, you're asking for it

What else should people use then?

_MS_

Waiting for the day when Sydney catches a virus.

Encoders

@jmgcaguicla said:

@Encoders said:
also, if you're still using http for nothing but text transfer, you're asking for it

What else should people use then?

http(s), or other alternative you can find on wiki

jmgcaguicla

@Encoders said:
http(s), or other alternative you can find on wiki

HTTPS doesn't prevent this tho', it hoses the request pipeline which comes after TLS.