AI Summary

Researchers have identified a new threat cluster, OP-512, which targets Microsoft IIS servers. This cluster deploys a custom web shell framework, indicating a focus on espionage. The framework is designed to be used on compromised servers, allowing attackers to maintain control and gather sensitive information. The connection to China is based on ReliaQuest's assessment with moderate to high confidence, suggesting a potential state-sponsored operation.

AI summaries can be wrong sometimes—always verify important details using the source article.