The Reveal Platform
Intel Name: Black hat seo poisoning search engine results for ai to distribute malware
Date of Scan: June 30, 2025
Impact: High
Summary: Our researchers recently identified AI-themed websites being used to distribute malware. Threat actors are leveraging the popularity of tools like ChatGPT and Luma AI to lure users. These malicious sites, often built on WordPress, are optimized to rank in search engines and attract traffic. When visited, they use JavaScript to initiate redirection chains that deliver malware like Vidar, Lumma, and Legion Loader.
