---
id: 6299
title: "SEO Poisoning Campaigns Target Browser Installers and Crypto Sites, Spreading Poseidon, GhostRAT & More"
source_domain: hunt.io
source_url: "https://hunt.io/blog/seo-poisoning-campaigns-target-browser-installers-and-crypto-sites-spreading-poseidon-ghostrat-more"
published_at: "2024-07-16T00:00:00Z"
tags: ["macos", "malvertising", "signal", "seo-poisoning", "tradingview", "ghostrat", "poseidon"]
phying_url: "https://phying.com/item/6299"
lang: en
---

# SEO Poisoning Campaigns Target Browser Installers and Crypto Sites, Spreading Poseidon, GhostRAT & More

## Summary

Hunt.io exposes SEO-poisoned lookalike sites pushing trojanized installers for Sleipnir, Signal and TradingView—including a macOS DMG with a Poseidon stealer and GhostRAT on a crypto-themed portal.

## Intelligence Metadata

- **Sources:** hunt.io
- **Published:** 2024-07-16T00:00:00Z
- **Original:** https://hunt.io/blog/seo-poisoning-campaigns-target-browser-installers-and-crypto-sites-spreading-poseidon-ghostrat-more
- **Phying News:** https://phying.com/item/6299