Cyberdudebivash

        SESSIONHUNTER: New .NET Malware Suite Targets IIS Servers to Steal Session Cookies and Credentials     By CyberDudeBivash • October 01, 2025, 05:45 PM IST • Malware Analysis & Threat Report   Our threat intelligence team is tracking a sophisticated and highly stealthy malware suite, written in .NET, that we have codenamed **"SessionHunter."** This malware is specifically designed to target Microsoft Internet Information Services (IIS) web servers, operating not as a separate process, but as a malicious native module loaded directly into the IIS worker process. Its primary function is to act as a digital wiretap, silently intercepting user credentials and session cookies in real-time as they flow through the server. By living inside a legitimate and trusted process, SessionHunter is able to evade traditional antivirus solutions and operate undetected for long periods. This is a deep-dive analysis into the malware's architecture, its ...