Cybersecurity articles tagged #SEO Poisoning on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/cl-cri-1171-ppi-network-targets-gamers-enterpriseshttps://runtimerebel.com/blog/cl-cri-1171-ppi-network-targets-gamers-enterprisesUnit 42 uncovers CL-CRI-1171, a pay-per-install network spreading malware via YouTube and SEO poisoning to gamers and critical infrastructure.Fri, 02 Oct 2026 03:13:14 GMTSEO PoisoningCL CRI 1171Pay Per InstallInsomnia RATARKTunnelhttps://runtimerebel.com/blog/modbeacon-rat-silver-fox-uses-grpc-for-stealthy-c2https://runtimerebel.com/blog/modbeacon-rat-silver-fox-uses-grpc-for-stealthy-c2A new Rust-based MODBEACON RAT, linked to the Silver Fox cybercrime group, employs gRPC streaming for encrypted C2, propagated via SEO poisoning.Fri, 10 Jul 2026 14:30:03 GMTMODBEACONRATSilver FoxgRPCC2RustSEO Poisoninghttps://runtimerebel.com/blog/2026-world-cup-scams-detecting-seo-hijacking-and-purchase-fraudhttps://runtimerebel.com/blog/2026-world-cup-scams-detecting-seo-hijacking-and-purchase-fraudThreat actors are using SEO hijacking and compromised domains to scale purchase scams targeting the 2026 FIFA World Cup. Learn how to identify these TTPs.Wed, 24 Jun 2026 09:24:04 GMT2026 World CupSEO PoisoningPurchase ScamsPhishingFraud Detectionhttps://runtimerebel.com/blog/seo-poisoning-and-ai-chatbots-spread-gpu-mining-malwarehttps://runtimerebel.com/blog/seo-poisoning-and-ai-chatbots-spread-gpu-mining-malwareThreat actors are using SEO poisoning and manipulated AI chatbot recommendations to distribute persistent GPU mining malware to high-performance systems.Thu, 28 May 2026 00:52:37 GMTCryptojackingSEO PoisoningGPU MinerAI Bot ManipulationSocial Engineeringhttps://runtimerebel.com/blog/nimbus-manticore-targets-aviation-via-minifast-and-minijunk-v2https://runtimerebel.com/blog/nimbus-manticore-targets-aviation-via-minifast-and-minijunk-v2Iranian threat actor Nimbus Manticore utilizes SEO poisoning and phishing to deploy MiniFast malware against global aviation and software organizations.Tue, 26 May 2026 09:18:05 GMTNimbus ManticoreUNC1549MiniFastMiniJunk V2SEO PoisoningAviation Sectorhttps://runtimerebel.com/blog/etherrat-exploits-github-facades-to-target-high-privilege-accountshttps://runtimerebel.com/blog/etherrat-exploits-github-facades-to-target-high-privilege-accountsA sophisticated campaign uses GitHub Facades and SEO poisoning to distribute EtherRAT by spoofing administrative utilities and DevOps tools.Thu, 30 Apr 2026 12:40:37 GMTEtherRATGitHub FacadesDevOps SecuritySEO PoisoningRAThttps://runtimerebel.com/blog/storm-2561-leverages-seo-poisoning-for-credential-thefthttps://runtimerebel.com/blog/storm-2561-leverages-seo-poisoning-for-credential-theftMicrosoft warns of Storm-2561's credential theft campaign using SEO poisoning to distribute fake, digitally signed VPN clients disguised as legitimate enterprise…Fri, 13 Mar 2026 16:19:18 GMTStorm 2561SEO PoisoningCredential TheftVPN TrojanMalwareMicrosofthttps://runtimerebel.com/blog/bing-ai-promotes-fake-github-repositories-spreading-info-stealershttps://runtimerebel.com/blog/bing-ai-promotes-fake-github-repositories-spreading-info-stealersMicrosoft Bing AI search promoted malicious GitHub repositories hosting fake OpenClaw software, leading to info-stealing and proxy malware deployment.Fri, 06 Mar 2026 00:39:09 GMTBing AIOpenClawInfostealerProxy MalwareGitHubSEO PoisoningAI Powered Search