Family group chats: Your (very last) line of cyber defense
Summary: Cisco Talos uncovered a Chinese-speaking cybercrime group, UAT-8099, that hacks reputable Internet Information Services (IIS) servers in India, Thailand, Vietnam, Canada, and Brazil to manipulate search results for profit and steal credentials and certificates. The group uses automation, custom malware, and persistence techniques to keep long-term access and defend its control from other attackers.
Key Takeaway: UAT-8099 is monetizing trusted IIS servers that many organizations treat as infrastructure rather than attack surface, so the exposure is not a single breach but sustained access to credentials and certificates across a wide range of victims.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026