The dropper seems to be prompted to function by the existence of these strings. Because IIS reports 404 errors in the same log file by default, Cranefly is able to send instructions using a URL ...

Software vendor Trimble is warning that hackers are exploiting a Cityworks deserialization vulnerability to remotely execute ...