A malware ecosystem known as BadIIS is being used by a chinese-speaking threat. The ecosystem is reportedly being used in various campaigns, including a large-scale credential harvesting operation and attacks on telecommunications infrastructure in south asia. However, the exact scope and nature of the threat are unclear, with multiple reports detailing different aspects of the ecosystem and its potential connections to other malware operations.