Internet Information Services is a technology platform tracked across 4 threat clusters and 4 intelligence report mentions on ThreatCluster. First observed December 15, 2025; most recent activity May 13, 2026.
Internet Information Services (IIS) is Microsoft's web server and application hosting platform for Windows, widely deployed to host websites and services. It relies on Windows components and messaging infrastructure; timely security patches are critical, but the December 2025 updates reportedly caused Message Queuing (MSMQ) failures, illustrating how patching can impact dependent services and web apps in enterprise environments.
FamousSparrow, a China-aligned APT group, launched a multi-wave cyberespionage campaign against an Azerbaijani oil and gas company from late December 2025 to February 2026. The attackers employed an evolved DLL…
In 2024, ESET identified a new China-aligned APT group named LongNosedGoblin, which targets governmental entities in Southeast Asia and Japan. The group employs a custom toolset, primarily using C#/.NET applications, to…
Cisco Talos reports on the UAT-8099 campaign that has been targeting vulnerable IIS web servers across Asia since August 2025. Key affected regions include India, Pakistan, Thailand, Vietnam, and Japan, with a notable…
Microsoft has confirmed that the December 2025 security updates are causing failures in Message Queuing (MSMQ) functionality, impacting enterprise applications and Internet Information Services (IIS) websites. The issue…