ReliaQuest uncovers OP-512: New China-linked threat targeting IIS web servers
ReliaQuest identified a new China‑linked threat cluster, OP‑512, that targets Microsoft IIS servers with a custom web‑shell framework. The group deploys three uniquely generated shells, using cryptographic controls and timestomping to evade detection, and aims at espionage of organizations aligned with Chinese intelligence priorities.