Tag: supply chain risk

1 Attack Reports | 0 Vulnerabilities

Attack reports

SEO poisoning campaign leverages Gemini and Claude Code impersonation to deliver infostealer

Financially motivated eCrime actors are conducting an ongoing infostealer campaign targeting software developers through SEO poisoning techniques. The operation impersonates AI platforms including Gemini CLI and Claude Code, as well as developer tools like Node.js, Chocolatey, and KeePassXC. Attack…
typosquatting
infostealer
seo poisoning
credential theft
developer targeting
2026-05-21
ai platform impersonation
fileless powershell
supply chain risk
Published: May 21, 2026
Downloadable IOCs: 34
Click here to see more Attack Reports