Back Cybersecuritynews

SEO Poisoning Campaign Impersonates 25+ Popular Apps to Deliver AsyncRAT Since October 2025

Cybersecuritynews •Tushar Subhra Dutta • March 23, 2026

A sophisticated SEO poisoning campaign has been quietly targeting Windows users since at least October 2025, luring them into downloading trojanized installers for more than 25 popular software applications. The operation went undetected for roughly five months before investigators uncovered its full scope in March 2026, revealing a multi-stage infection chain that silently compromises victims’ […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SEO Poisoning Campaign Targets Users with AsyncRAT via Fake App Downloads Since October 2025, a sophisticated SEO poisoning campaign has been targeting Windows users by impersonating over 25 popular software applications. The attackers have been using trojanized installers to deliver the AsyncRAT remote access trojan, compromising victims' systems. This operation remained undetected for approximately five months until it was uncovered in March 2026. The campaign employs a variety of fake download portals to lure users into downloading malicious software. The scope of the impact is significant, affecting a wide range of users who unknowingly downloaded these trojanized applications. Investigators are currently assessing the full extent of the compromise. As of March 2026, the campaign is still active, posing a continuing threat to unsuspecting users. Security professionals are urged to be vigilant and educate users about the risks of downloading software from unverified sources. 2 sources 67

Extracted Entities

SEO Poisoning Campaign Impersonates 25+ Popular Apps to Deliver AsyncRAT Since October 2025

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (1)

Platforms (1)