GootLoader
SEO-poisoning loader
Source Attribution
- Origin
- MITRE
- Source
- Researchers
- Verified
- 2026-08-26T16:07:01.550Z
- Confidence
- high
Source: Researchers · Verified: 2026-08-26T16:07:01.550Z · Confidence: high
Security Timeline
- discovered GootLoader first observed
- updated Encyclopedia entry reviewed (Phase 45C)
Quick Answer
GootLoader spreads through SEO-poisoned sites to deliver post-exploitation tooling and ransomware. (attributes recorded from Researchers).
Definition
GootLoader spreads through SEO-poisoned sites to deliver post-exploitation tooling and ransomware.
Overview
GootLoader spreads through SEO-poisoned sites to deliver post-exploitation tooling and ransomware.
Behavior
- Malicious websites
- AutoIt/Script payloads
First Seen
2020-10
Target
SEO-poisoning loader
Malware Intelligence
Family: GootLoader
Techniques: T1566, T1105, T1059
Targets: SEO-poisoning loader
Behavior:
- Malicious websites
- AutoIt/Script payloads
References
Have a follow-up question?
Ask AI about this Start an investigation Ask OpenTrojan's evidence-backed assistant about this topic — answers cite their sources.