Threat Response Unit from eSentire issued an alert about having over the past three weeks observed Goot loader attacks on three law firms and one accounting firm. The law firm employees tricked by the malicious agreements were searching for common legal filings including Post Nuptial Agreement, Model IP Agreement and Olympus Plea Agreement The group has also gamed Googles Search Engine Optimization algorithm to get their malicious sites and downloads to the top of keyword search results.”]
Source: https://threatpost.com/gootloader-accounting-law-firms/177629/