Don’t search for information on cats at work — you could be at risk of being hacked


- Researchers have spotted a very specific SEO poisoning campaign
- The campaign is dropping a decade-old malware framework
- The end result is either a Cobalt Strike beacon, or ransomware
If you’re an Australian interested in Bengal cats, be very careful when researching the topic online, because you might get hacked.
That’s what cybersecurity researchers from Sophos said in a new report concerning a new SEO poisoning campaign that targets people searching for Bengal cats in Australia.
SEO poisoning is a malicious technique in which cybercriminals manipulate search engine results to push websites under their control to the top of search engine page results. When users open these websites, they are offered malware downloads, or phished for sensitive data.
Limited operation
In this campaign, the crooks were deploying Gootloader, a malware delivery framework used primarily to distribute various types of malware, such as ransomware and information-stealing trojans (like the Gootkit banking trojan). Sophos said they observed Cobalt Strike beacons being dropped, as well as different ransomware strains.
Gootloader has been around for a decade, and so has SEO poisoning. There is nothing out of the ordinary in the method of compromise, or the tools being deployed by the hackers. What stands out is the topic the crooks chose for their distribution – Bengal cats in Australia.
Usually, the crooks would either try to compromise as many computers as possible, or they would go for a specific high-value target, such as a financial institution, or a hospital. SEO poisoning is usually used in the former, to attack a larger cohort such as software developers, cryptocurrency users, or something similar.
In this scenario, the only people who would possibly get infected would be the ones searching “Are Bengal Cats illegal in Australia?”.
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
One potential reason could be that the crooks were trying to test their SEO poisoning strategies out without drawing too much attention to themselves, therefore choosing the most niche thing they could possibly find.
Via The Register
You might also like
Researchers have spotted a very specific SEO poisoning campaign The campaign is dropping a decade-old malware framework The end result is either a Cobalt Strike beacon, or ransomware If you’re an Australian interested in Bengal cats, be very careful when researching the topic online, because you might get hacked. That’s…
Recent Posts
- 3 features that would actually make me pay for a Samsung Health subscription for my Galaxy Watch – and one big problem it needs to avoid
- TikTok’s ‘ban’ problem could end soon with a new app and a sale
- 16-Core AMD EPYC 4005 CPU is almost 3X faster than AMD’s first server flagship – and I can’t believe what a bargain that is
- Samsung’s very special rugged tablet comes with eight – yes, eight – years of Android updates and hot-swappable batteries
- The latest Samsung Galaxy Z Flip 7 leak is the first hands-on video of the flip foldable
Archives
- July 2025
- June 2025
- May 2025
- April 2025
- March 2025
- February 2025
- January 2025
- December 2024
- November 2024
- October 2024
- September 2024
- August 2024
- July 2024
- June 2024
- May 2024
- April 2024
- March 2024
- February 2024
- January 2024
- December 2023
- November 2023
- October 2023
- September 2023
- August 2023
- July 2023
- June 2023
- May 2023
- April 2023
- March 2023
- February 2023
- January 2023
- December 2022
- November 2022
- October 2022
- September 2022
- August 2022
- July 2022