'INK DRAGON' THREAT GROUP TARGETS IIS SERVERS TO BUILD STEALTHY GLOBAL NETWORK

Summary from the TLDR InfoSec newsletter

Chinese-linked threat group Ink Dragon is compromising misconfigured IIS servers at government organizations in Europe, Asia, and South America to create a stealthy mesh relay network that obscures C2 traffic origins.