Back Gbhackers

SEO Poisoning Campaign Uses Fake Popular Apps to Deliver AsyncRAT

Gbhackers •Mayura Kathir • March 23, 2026

SEO Poisoning Campaign Impersonates 25+ Popular Apps to Deliver AsyncRAT Since October 2025.An ongoing SEO poisoning campaign abuses results to trick users into downloading trojanized installers for more than 25 popular applications, ultimately deploying the AsyncRAT remote access trojan. Active since at least October 2025, the operation uses a mix of fake download portals, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SEO Poisoning Campaign Targets Users with AsyncRAT via Fake App Downloads Since October 2025, a sophisticated SEO poisoning campaign has been targeting Windows users by impersonating over 25 popular software applications. The attackers have been using trojanized installers to deliver the AsyncRAT remote access trojan, compromising victims' systems. This operation remained undetected for approximately five months until it was uncovered in March 2026. The campaign employs a variety of fake download portals to lure users into downloading malicious software. The scope of the impact is significant, affecting a wide range of users who unknowingly downloaded these trojanized applications. Investigators are currently assessing the full extent of the compromise. As of March 2026, the campaign is still active, posing a continuing threat to unsuspecting users. Security professionals are urged to be vigilant and educate users about the risks of downloading software from unverified sources. 2 sources 67

Extracted Entities

SEO Poisoning Campaign Uses Fake Popular Apps to Deliver AsyncRAT

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

Malware (1)