A chinese-speaking cybercrime group is reportedly hijacking IIS servers, with some outlets indicating the group is using the servers for SEO fraud. The group is said to be utilizing a commodity ecosystem known as BadIIS, which is described as a malware-as-a-service. The scope and details of the threat are still being reported, with various outlets providing different perspectives on the group's activities and methods.