You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
potato
About this tag
The potato tag on WindowsForum.com covers two unrelated topics: humorous, anthropomorphic potato images shared in the Off Topic section, and the GhostRedirector campaign, a sophisticated SEO fraud operation that compromised at least 65 Windows IIS servers using a native C++ backdoor (Rungan) and a malicious IIS module (Gamshen) to manipulate search engine crawlers. The security content, disclosed by ESET Research, details how the threat actor achieved long-term persistence and stealthy redirection for gambling site promotion. The tag thus spans lighthearted community posts and serious enterprise security discussions.
ESET researchers have uncovered a compact but sophisticated campaign — tracked as GhostRedirector — that has secretly turned at least 65 Internet‑facing Windows servers into a stealthy SEO‑fraud network while simultaneously installing a resilient native backdoor for long‑term access. Background...
ESET researchers have uncovered a compact but sophisticated campaign — tracked as GhostRedirector — that has compromised at least 65 Internet‑facing Windows servers and combined a native C++ backdoor with a malicious IIS native module to deliver long‑lived persistence and server‑side SEO fraud...
ESET Research revealed that a previously undocumented threat actor, which the company calls GhostRedirector, compromised at least 65 Internet‑facing Windows IIS hosts and deployed two custom native components — a C++ backdoor named Rungan and a malicious IIS module called Gamshen — to run a...
ESET Research has uncovered a previously undocumented threat actor it calls GhostRedirector, which in June 2025 was found to have compromised at least 65 Windows servers across multiple countries and deployed two custom tools — a C++ backdoor named Rungan and a native IIS module named Gamshen...