BADIIS Malware Compromises 1,800+ Windows Servers in SEO Poisoning Attack

Back Cyberpress

BADIIS Malware Compromises 1,800+ Windows Servers in SEO Poisoning Attack

Cyberpress • February 13, 2026

Share: View original

In a coordinated cybercrime operation, the Chinese-speaking group REF4033, also known as UAT-8099, has compromised over 1800 Windows.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

BADIIS Malware Compromises 1,800+ Windows Servers for SEO Poisoning A cyber campaign has compromised over 1,800 Windows servers worldwide using BADIIS malware. This malware specifically targets Internet Information Services (IIS) environments, converting legitimate servers into a network for SEO poisoning, promoting illegal gambling sites and fraudulent cryptocurrency operations. 5 sources 33

Extracted Entities

APT Groups (1)

Attack Types (1)

Campaigns (1)

Malware (1)

Platforms (1)