Advertisement
CL-CRI-1171 PPI Network Targets Gamers & Enterprises
Unit 42 uncovers CL-CRI-1171, a pay-per-install network spreading malware via YouTube and SEO poisoning to gamers and critical infrastructure.
MODBEACON RAT: Silver Fox Uses gRPC for Stealthy C2
A new Rust-based MODBEACON RAT, linked to the Silver Fox cybercrime group, employs gRPC streaming for encrypted C2, propagated via SEO poisoning.
2026 World Cup Scams: Detecting SEO Hijacking and Purchase Fraud
Threat actors are using SEO hijacking and compromised domains to scale purchase scams targeting the 2026 FIFA World Cup. Learn how to identify these TTPs.
SEO Poisoning and AI Chatbots Spread GPU Mining Malware
Threat actors are using SEO poisoning and manipulated AI chatbot recommendations to distribute persistent GPU mining malware to high-performance systems.
Nimbus Manticore Targets Aviation via MiniFast and MiniJunk V2
Iranian threat actor Nimbus Manticore utilizes SEO poisoning and phishing to deploy MiniFast malware against global aviation and software organizations.
EtherRAT Exploits GitHub Facades to Target High-Privilege Accounts
A sophisticated campaign uses GitHub Facades and SEO poisoning to distribute EtherRAT by spoofing administrative utilities and DevOps tools.
Advertisement
Storm-2561 Leverages SEO Poisoning for Credential Theft
Microsoft warns of Storm-2561's credential theft campaign using SEO poisoning to distribute fake, digitally signed VPN clients disguised as legitimate enterprise…
Bing AI Promotes Fake GitHub Repositories Spreading Info-Stealers
Microsoft Bing AI search promoted malicious GitHub repositories hosting fake OpenClaw software, leading to info-stealing and proxy malware deployment.