GPU Mining Malware SEO Poisoning Campaign | MSSP Advisory

Threat actors are distributing GPU mining malware through SEO poisoning that manipulates search results and AI chatbot recommendations to promote fake software downloads. The campaign targets high-performance systems by poisoning search results for legitimate software like OBS Studio, VLC, and other popular applications. Victims download malicious executables that install cryptojacking software designed to mine cryptocurrency using GPU resources.

Your RMM endpoints and client workstations with dedicated graphics cards are prime targets for this GPU-focused cryptojacking operation. Clients downloading software from poisoned search results will get mining malware that degrades system performance and increases power costs. The SEO manipulation means even careful users following top search results can get compromised.

📬