Tag: Search Poisoning
-

Operation Rewrite: Chinese Threat Actors Hijack Websites in Massive Search Poisoning Campaign
The Unit 42 team at Palo Alto Networks has uncovered a large-scale search poisoning campaign dubbed Operation Rewrite, in which Chinese-speaking threat actors deployed malicious BadIIS components onto internet-facing servers and used compromised websites as reverse proxies to manipulate content and redirect traffic to fraudulent destinations. The activity involved the installation of both native IIS…

