---
title: "Deepwatch Report: Is Gootloader Working With a Foreign Intel Service?"
description: Deepwatch Adversary Tactics and Intelligence group responded to a customer incident likely associated with Gootloader threat actors using SEO poisoning.
---

Your HTML content here

[![DeepWatch-Horizontal-FC-logo](https://go.deepwatch.com/hs-fs/hubfs/DeepWatch-Horizontal-FC-logo.png?width=300&height=70&name=DeepWatch-Horizontal-FC-logo.png "DeepWatch-Horizontal-FC-logo")](http://deepwatch.com)

REPORT

# Deepwatch Incident Intel Report

## Is Gootloader Working With a Foreign Intelligence Service?

Deepwatch’s Adversary Tactics and Intelligence (ATI) group responded to a customer incident highly likely associated with Gootloader threat actors using the search engine optimization (SEO) poisoning technique. Read through this detailed report to understand the findings including:

- A deeper dive into an analysis of the campaign
- The observed activities
- What you need to do - guidance and actions
- MITRE ATT&CK and Observables

### Access the Report

Copyright © 2026 Deepwatch. All Rights Reserved.