Microsoft Warns of IIS Extensions Being Increasingly Used as Exchange Server Backdoors

Microsoft says attackers increasingly use malicious Internet Information Services (IIS) web server extensions to backdoor unpatched Exchange servers as they have lower detection rates compared to web shells.