A recent SEO poisoning campaign has impacted over 8,500 small and medium-sized businesses (SMBs) from January to April 2025, as reported by Arctic Wolf and Kaspersky. Cybercriminals disguised malware as popular tools like ChatGPT, Zoom, and Microsoft Office applications through optimized search ads, leading victims to counterfeit download sites. These sites delivered trojanized installers containing dangerous malware like Oyster and Vidar.
The campaign included stealthy delivery methods, such as password-protected ZIPs and disguised MSI packages. Notably, fake ChatGPT-themed malware saw a significant 115% increase, while infections from Zoom-themed malware represented 41% of unique files. Attack vectors also targeted users in cryptocurrency communities, promoting fake recovery apps.
Experts recommend sourcing software from official vendors, using ad blockers, and implementing endpoint security. Cybersecurity providers urge stricter standards for app downloads and enhanced vigilance to combat SEO poisoning. Awareness and a layered defense strategy are crucial for protecting SMBs from these threats.
Source link
