Warning: Chameleon SEO Poisoning Spreads Phishing Pages
KnowBe4, Tuesday, September 1st, 2026
Cloaked SEO poisoning attacks rose 40% in Q2 2026, using disguised search results to push users to phishing sites.
KnowBe4 summarizes Fortra research showing that cloaked SEO poisoning attacks surged 40 percent in the second quarter of 2026.
The technique, also called Chameleon SEO poisoning, serves different content to search engine crawlers than to human visitors so that malicious pages rank normally in results.
Users who click through from a search engine are then delivered to phishing sites rather than the indexed content. The growth in this tactic means search results themselves are becoming a meaningful initial access vector alongside email.