Data-stealing malware pretends to be Microsoft IIS server module