Choose how you want to continue.
By continuing, you agree to our Privacy Policy.
From PDB strings to MaaS: Tracking a commodity BadIIS ecosystem used by Chinese-speaking threat
Threat Spotlight
Cisco Talos Malware Protection
Cisco Talos Antivirus
Cisco Talos Web Filtering
Cybersecurity
MAAS
malware
threat-intelligence
Summary
This post discusses the discovery of a BadIIS malware variant that uses 'demo.pdb' strings and operates under a malware-as-a-service model, highlighting its use among Chinese-speaking cyber crime groups.
MORE POSTS LIKE THIS
Cisco Talos finds malware that puts its next move to a four-model vote
Siliconangle ·
Sep 23, 2026
security: Impersonating IT support: how threat actors turn a remote session into enterprise-wide access
Sujith Quintelier ·
Sep 3, 2026
UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign
Blog Talosintelligence ·
Jul 16, 2026
BlackToad Threat Actors Deploy Stealthy Phishing Lures
Securityonline ·
Jun 2, 2026
AUTHOR
BLOG POST FEATURED ON
Add this plugin to your blog