From Cybersecurity Help – Chinese Ink Dragon hackers set their sights on Europe, exploit IIS and SharePoint flaws

The attack starts with the attackers gaining initial access via ViewState deserialization or ToolShell-based exploits, then deploy ShadowPad on the compromised server. 

​ Read More 

​