Microsoft: IIS extensions increasingly used as Exchange backdoors

Microsoft says attackers increasingly use malicious Internet Information Services (IIS) web server extensions to backdoor unpatched Exchange servers as they have lower detection rates compared to web shells. [...]

backdoors exchange extensions iis microsoft security