Strong warning to Google users: Watch out for this

A well-known malware program has once again raised concerns among cybersecurity experts.

“Gootloader” is a type of malware used to smuggle malicious code onto users’ computers through manipulated websites.

The programs are distributed via search engines, where users risk clicking on fake pages when searching for legal documents and contract templates.

The malicious pages are placed high in Google search results with the help of good search engine optimization (SEO).

When a user clicks through to one of these sites, they are offered a document for download that actually contains a ZIP file with malicious content.

If the downloaded file is opened, it can give hackers full access to the computer.

Targeting legally interested users

According to cybersecurity site BleepingComputer, this latest campaign is very extensive.

– In the latest campaign, we have observed thousands of unique keywords spread across 100 websites, says a cybersecurity researcher.

He further explains that the ultimate goal is to convince users to download a malicious ZIP file containing a JScript file.

This file can then be used for further malicious activities, which often include installing ransomware on the computer.

Ransomware is software that can lock a computer and encrypt its files.

In many cases, the user is asked to pay a ransom to restore access to their computer and data.

ComputerSweden: Attacks happen via document searches

Swedish technology site ComputerSweden has previously warned about Gootloader and describes how the malware is often spread through search engines.

– Gootloader infections usually start by hijacking search engine results that lead to malicious sites, where victims looking for various document templates are tricked into downloading the malware. It can then download and install other malware, ComputerSweden reported in early 2023.

Users are advised to be extra cautious when downloading documents from unfamiliar sites and to avoid ZIP files from unknown sources.