Security researchers have discovered malware that can install a backdoor on Microsoft’s web server software Internet Information Services (IIS). Dubbed IISpy, the malware uses various means to interfere with the server’s logging and evade detection so it can perform long-term espionage.