Bengal Cat Lovers in Australia Targeted by Gootloader Malware

Sophos X-Ops observed a targeted GootLoader SEO-poisoning campaign that lured Australian Bengal cat owners to malicious search results; victims downloaded ZIP files containing JavaScript loaders that drop obfuscated payloads, create a persistent "Business Aviation" scheduled task (run via wscript.exe), and call back to attacker-controlled domains. The platform acts as an initial-access-as-a-service capable of delivering post-exploitation tools and ransomware, and evidence includes PowerShell commands sending Base64-encoded environment data and identified callhome domains.