'SEO fraud-as-a-service' scheme hijacks Windows servers to promote gambling websites

A newly identified threat actor group, GhostRedirector, has launched a global "SEO fraud-as-a-service" campaign targeting Windows servers to promote gambling websites. The campaign leverages two custom backdoors - Rungan and Gamshen.