Hackers Ditch Phishing for SEO Poisoning: WikiLoader Malware Targets VPN Users
Hackers are shifting tactics with WikiLoader malware, moving from phishing to SEO poisoning and VPN spoofing. According to Unit 42, these new methods are expanding their range of potential victims, particularly targeting sectors like higher education and transportation in the U.S.
Hot Take:
Looks like hackers are now SEO experts! If only they could use their powers for good, we’d all have perfectly optimized blog posts instead of malware-infected laptops.
Key Points:
- Hackers are shifting tactics from phishing to SEO poisoning and VPN spoofing.
- Fake websites offering GlobalProtect VPN are being used to distribute WikiLoader malware.
- SEO poisoning tricks search engines into ranking malicious sites higher.
- WikiLoader, a multistage malware loader, is primarily affecting the U.S. higher education and transportation sectors.
- Unit 42 of Palo Alto Networks is the team tracking these malicious activities.
Already a member? Log in here