A China-linked hacking group is quietly living inside Microsoft IIS servers

ReliaQuest says a newly uncovered China-linked hacking group called OP-512 has been targeting outdated Microsoft IIS servers using stealthy web shells, encrypted command channels, and techniques designed to evade traditional antivirus detection.