{"id":11764,"date":"2026-03-25T13:53:09","date_gmt":"2026-03-25T13:53:09","guid":{"rendered":"https:\/\/events.aavar.org\/avar2025\/?page_id=11764"},"modified":"2026-03-25T13:53:09","modified_gmt":"2026-03-25T13:53:09","slug":"meet-venomseo-new-threat-targeting-malaysian-websites-for-black-seo","status":"publish","type":"page","link":"https:\/\/events.aavar.org\/avar2025\/index.php\/meet-venomseo-new-threat-targeting-malaysian-websites-for-black-seo\/","title":{"rendered":"Meet VenomSEO: New Threat Targeting Malaysian Websites for Black SEO"},"content":{"rendered":"\n[vc_row full_width=”stretch_row” el_class=”agenda-banner” el_id=”agenda_banner”] [vc_column]\n\n\n\n
\n
\n
<\/div>\n\n\n\n

AGENDA<\/p>\n<\/div>\n\n\n\n

<\/div>\n<\/div>\n\n\n\n

[\/vc_column] [\/vc_row]<\/p>\n\n\n\n

<\/div>\n\n\n\n

<— Back<\/a><\/strong><\/p>\n\n\n\n

Meet VenomSEO: New Threat Targeting Malaysian Websites for Black SEO<\/p>\n\n\n\n

In this presentation, we will talk about VenomSEO, a newly identified advanced persistent threat (APT) group targeting governmental and corporate websites running on Linux platforms in Malaysia with the aim of facilitating Black SEO operations.<\/p>\n\n\n\n

The group\u2019s primary objective appears to be the compromise of web servers for traffic redirection and monetized search engine manipulation.<\/p>\n\n\n\n

We will delve into a recent case study involving a targeted attack on a Malaysian company, shedding light on VenomSEO\u2019s infiltration strategies and post-exploitation activities.<\/p>\n\n\n\n

Further investigation has revealed that similar compromises have occurred across multiple countries, including Brazil, India, and Thailand.<\/p>\n\n\n\n

VenomSEO employs a sophisticated arsenal of attack techniques, including zero-day exploits, web shells, privilege escalation, backdoors, rootkits, and credential harvesting tools. We will analyze their tactics, techniques, and procedures (TTPs), offering insights into detection, mitigation, and defense strategies against this emerging threat.<\/p>\n\n\n\n

<\/div>\n\n\n\n
\n
\n
\n
\n
\"\"<\/figure>\n<\/div><\/div>\n\n\n\n
\n

Igor Zdobnov – Doctor Web, Ltd.<\/strong><\/strong><\/strong><\/p>\n\n\n\n

Igor Zdobnov joined Doctor Web in 2002 as a malware analyst and since 2009 has been working as a chief malware analyst. He is leading different security projects inside the company, threat intelligence, threat detection and prevention. He is passionate in malware analysis, reverse engineering and building machine learning malware detection systems.<\/p>\n<\/div>\n<\/div>\n\n\n\n

<\/div>\n\n\n\n
\n
\n
\"\"<\/figure>\n<\/div><\/div>\n\n\n\n
\n

Ivan Korolev – Doctor Web, Ltd.<\/strong><\/strong><\/strong><\/strong><\/p>\n\n\n\n

Ivan Korolev joined Doctor Web in 2014 as a malware analyst and since 2019 has been working as a team leader for botnet research team. He is focused on analyzing targeted attacks, botnets and emerging threats. He likes to find vulnerabilities and participate in bug bounties in spare time.<\/p>\n<\/div>\n<\/div>\n\n\n\n

<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

[vc_row full_width=”stretch_row” el_class=”agenda-banner” el_id=”agenda_banner”] [vc_column] AGENDA [\/vc_column] [\/vc_row] <— Back Meet VenomSEO: New Threat Targeting Malaysian Websites for Black SEO In this presentation, we will talk about VenomSEO, a newly identified advanced persistent threat (APT) group targeting governmental and corporate websites running on Linux platforms in Malaysia with the aim of facilitating Black SEO operations. The group\u2019s primary objective appears<\/p>\n

<\/div>\n

Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-11764","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/events.aavar.org\/avar2025\/index.php\/wp-json\/wp\/v2\/pages\/11764","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/events.aavar.org\/avar2025\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/events.aavar.org\/avar2025\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/events.aavar.org\/avar2025\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/events.aavar.org\/avar2025\/index.php\/wp-json\/wp\/v2\/comments?post=11764"}],"version-history":[{"count":1,"href":"https:\/\/events.aavar.org\/avar2025\/index.php\/wp-json\/wp\/v2\/pages\/11764\/revisions"}],"predecessor-version":[{"id":11767,"href":"https:\/\/events.aavar.org\/avar2025\/index.php\/wp-json\/wp\/v2\/pages\/11764\/revisions\/11767"}],"wp:attachment":[{"href":"https:\/\/events.aavar.org\/avar2025\/index.php\/wp-json\/wp\/v2\/media?parent=11764"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}