Threat actors always search for vulnerable devices and networks to gain illicit access and perform malicious activities to accomplish their goals. The APT group, Lazarus, as an initial breach path actively targeting the Microsoft Internet Information Services (IIS) servers.

Source: GBHackers