GootLoader’s Evolution: From SEO Poisoning to Persistent Network Intrusions

GootLoader has recently targeted Bengal cat enthusiasts in Australia with a new variant, leveraging SEO poisoning to manipulate Google search results and redirect users to malicious sites. Actively exploited in the wild, this variant exploits users’ trust with a tailored approach to gain initial access. The campaign then delivers the GootKit RAT and an advanced information stealer, enabling persistent exploitation and further compromise.