Iran-linked hackers used SEO poisoning to spread fake SQL Developer installer
VPN Central [Unofficial]
May 27, 2026
Iran-linked threat group Nimbus Manticore used SEO poisoning to push a fake SQL Developer download site that delivered a new Windows backdoor called MiniFast. The campaign marked a shift from the group’s usual phishing lures because it targeted users through search results instead of direct email contact. According to Check Point Research, Nimbus Manticore resurfaced […]
The post Iran-linked hackers used SEO poisoning to spread fake SQL Developer installer appeared first on VPN Central.
Discussion in the ATmosphere