ESET’s researchers have uncovered a previously undocumented threat cluster that covertly poisons legitimate IIS-hosted websites to manipulate Google rankings while also planting a stealthy C++ backdoor on Windows servers — a campaign ESET calls GhostRedirector that, according to an internet-wide...
ESET researchers have uncovered a compact but sophisticated campaign — tracked as GhostRedirector — that has compromised at least 65 Internet‑facing Windows servers and combined a native C++ backdoor with a malicious IIS native module to deliver long‑lived persistence and server‑side SEO fraud...
ESET Research has uncovered a previously undocumented threat actor it calls GhostRedirector, which in June 2025 was found to have compromised at least 65 Windows servers across multiple countries and deployed two custom tools — a C++ backdoor named Rungan and a native IIS module named Gamshen...
chained face
cinematic lighting
cloakedfigure
digital art
eerie atmosphere
ethereal
fantasy art
glowing cocoon
green glow
magical realism
moonlit village path
night scene
surreal art
art piece
child with lantern
cinematic lighting
cloakedfigure
clockwork
dim library
eerie atmosphere
fairytale scene
fantasy art
giant clock
gothic
illustration
lantern
magical realism
mystery
narrative art
night scene
shadows
silhouette
storytelling