Cisco Talos links China-based UAT-8099 to IIS server attacks using BadIIS malware for regional SEO fraud, targeting Thailand ...
Attackers could even have used one vulnerable Lookout user to gain access to other Google Cloud tenants' environments.
Many hands make light work.
Sometimes, a GUI app isn't enough.