New Frebniis Malware Abuses Microsoft IIS Feature to Establish Backdoor

Frebniis ensures Failed Request Tracing is enabled and then accesses w3wp.exe (IIS) process memory, obtaining the address of where the Failed Request Event Buffering code (iisfreb.dll) is loaded.