UAT-10147 Compromises Web Servers to Deploy BadIIS for SEO Fraud and Data Theft

The cybercrime group UAT-10147 compromises Windows and Linux web servers using known vulnerabilities to deploy BadIIS malware for SEO fraud and data theft. This group notably integrates agentic AI tools to automate exploit development, post-exploitation, and the scaling of its malicious operations.