Iceapple: A novel Internet Information Services (IIS) post-exploitation framework
released on 2022-05-12 @ 08:35:52 AM
A new, sophisticated post-exploitation framework for Microsoft’s IIS web server software is being developed by a Chinese state-sponsored adversary. IceApple uses an in-memory-only framework that highlights the adversary’s priority of maintaining a low forensic footprint on the infected host.