BATLOADER- Evasive Malware leverages SEO poisoning

Amber | Vulnerability Report

“BatLoader” dropper is used to dispense a range of malware tools on victim devices, including a banking Trojan, an information stealer, and the Cobalt Strike post-exploit toolkit. BatLoader malware actors utilize SEO poisoning to dupe potential victims into downloading malicious Microsoft Windows Installer (.msi) files that masquerade as legit software installers.

Reduce real exposure. Not just vulnerability volume.