Gootkit Loader’s Updated Tactics and Fileless Delivery of Cobalt Strike

Since it compromised a legitimate domain, the website used was likely to pass reputation services. Coupled with SEO poisoning, Gootkit operators can herd victims into a compromised website and bait them into downloading a file they are looking for.