Gambling Goblin Turns Brazilian Government Sites Into SEO Weapons
Check Point links Chinese-speaking cluster Gambling Goblin to SEO-fraud compromises of Brazilian government sites via malicious Apache modules since mid-2025.
64
Threat actor
Earth Berberoka
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenSep 2, 2026
- Last mentionedSep 2, 2026
Timeline
3 articles · newest firstMalicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages
Check Point links Gambling Goblin, a Chinese-speaking cluster, to malicious Apache modules hijacking Brazilian government servers to promote betting sites.
48
Gaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO weapon
Check Point identifies Chinese-speaking group Gambling Goblin hijacking Brazilian government domains via malicious Apache modules for SEO-manipulated gambling phishing.
55
Appears with
- oRATmalware · 3
- Gambling Goblinthreat actor · 3
- AlphaAgentmalware · 3
- DownPromalware · 3
- Apacheproduct · 3
- Trend Microvendor · 2
- Check Pointvendor · 2
- Check Point Researchorganization · 1
- PasswordHarvestermalware · 1
- Infosecurity Magazinevendor · 1
- Gambling Goblinorganization · 1
- 3snakemalware · 1
- Hunt.iovendor · 1
- Gamshenmalware · 1
- ANY.RUNvendor · 1
- Xnotemalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.