
Iranian Threat Actor Integrates AI, SEO Poisoning in New Attacks
Check Point Research reports that the Iranian group Nimbus Manticore may have used AI-assisted malware and search engine optimization (SEO) poisoning to spread attacks during the US-Iran conflict. The group blended artificial intelligence tools with methods to push harmful downloads to people searching for software like SQL Developer or remote-work tools. Researchers say this is the first time they have seen Nimbus Manticore use SEO poisoning and suggest some code in their malware appears to have been created with AI. The attackers mainly targeted defense, aviation, and software organizations in the US, Europe, and the Middle East. The report warns that this group's quick use of new technology may mean more AI-powered attacks in the future.













