Malicious IIS extensions quietly open persistent backdoors into servers

[Kent Sharkey]

Microsoft Security[^]:

Attackers are increasingly leveraging Internet Information Services (IIS) extensions as covert backdoors into servers, which hide deep in target environments and provide a durable persistence mechanism for attackers.

Kudos to them - I remember them being fairly difficult to write

but it's been a while since I looked into them