Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages
Check Point links Gambling Goblin, a Chinese-speaking cluster, to malicious Apache modules hijacking Brazilian government servers to promote betting sites.
48
Malware
Gamshen
- Mentions · 7d0
- Mentions · 30d0
- All mentions1
- First seenSep 2, 2026
- Last mentionedSep 2, 2026
Timeline
1 articles · newest firstAppears with
- Xnotemalware · 1
- AlphaAgentmalware · 1
- ESETvendor · 1
- GhostRedirectorthreat actor · 1
- Palo Alto Networks Unit 42vendor · 1
- Check Pointvendor · 1
- oRATmalware · 1
- Gambling Goblinthreat actor · 1
- Earth Berberokathreat actor · 1
- 3snakemalware · 1
- DownPromalware · 1
- Hunt.iovendor · 1
- Trend Microvendor · 1
- Apacheproduct · 1
- ANY.RUNvendor · 1
- Brazilian government and education institutionsvictim · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.