Attacks involving SEO poisoning are on the rise, Menlo Security researchers say. In the past few months, attackers have used the tactic in at least two campaigns. One was to distribute the REvil ransomware sample and the other to drop a backdoor called SolarMarker. The attacks highlight recent efforts by threat actors to target users instead of organizations in their malicious campaigns, the vendor says. The trend is likely being driven by adversaries seeking to take advantage of the current remote work environment where the lines between personal and business device use have blurred.”]
Source: https://www.darkreading.com/attacks-breaches/seo-poisoning-used-to-distribute-ransomware