From Wikipedia
Researchers describe in-memory IIS backdoors with evasive TTPs that maintained access for nearly two years.