Dossier
SEO poisoning
Coverage of SEO poisoning in the Nexus archive.
- New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic
The China-linked cybercrime group Silver Fox has developed a new Rust-based remote access trojan (RAR) called MODBEACON, which uses gRPC streaming for encrypted command-and-control traffic. QiAnXin attributes the threat to a low-sophistication, high-activity operation spreading malware through counterfeit installers and SEO poisoning techniques.
- GPU mining malware spreads via SEO poisoning, AI chatbots
Threat actors are spreading GPU mining malware through an SEO poisoning campaign that also manipulates AI chatbot recommendations to target high-performance computing systems. The coordinated effort focuses on cryptojacking, exploiting vulnerable hardware for cryptocurrency mining.