Builder Tool is a tool tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed May 19, 2026; most recent activity May 19, 2026.
Since 2024, multiple Chinese-speaking cybercrime groups have been exploiting a variant of BadIIS malware to manipulate SEO and inject malicious content into compromised Internet Information Services (IIS) servers across…