← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
UAT-8099: Chinese-speaking cybercrime group targets high-value IIS for SEO fraud
WHITE UAT-8099 Tr1sa111 2025-10-06 Modified: 2025-11-01
80
IOCs
HIGH VOLUME
chinese-speakingweb shellsdata theftseo fraudbadiiscybercrimeiis serverscobalt strike
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (1 / 80 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 f9f87fcfd6ecc6d65381f97aec65f75b — 2025-10-06
References (2)
↗ https://blog.talosintelligence.com/uat-8099-chinese-speaking-cybercrime-group-seo-fraud/ ↗ https://github.com/Cisco-Talos/IOCs/blob/main/2025/09/uat-8099-chinese-speaking-cybercrime-group-seo-fraud.txt