
ImpersonationReviewed
Zscaler: typosquat sites choclatey.org and massgravel.net pushed Armorsteal infostealer via poisoned search results
In research published October 22, 2026, Zscaler ThreatLabz says it found an SEO poisoning campaign in September 2026 that used fake websites to spread a Python-based malware family it calls Armorsteal. One lure impers…
- choclatey.org
- massgravel.net (fake Microsoft Activation Scripts site); community.choclatey.org
Reported Oct 22, 20261 report