"Search-engine optimization (SEO) tactics direct users searching for common business forms such as invoices, receipts or other templates to hacker-controlled Google-hosted domains. Hackers are using search-engine optimization (SEO) tactics to lure business users to more than 100,000 malicious Google sites that seem legitimate, but instead install a remote access trojan (RAT), used to gain a foothold on a network and later infect systems with ransomware, credential-stealers, banking trojans and other malware..." https://threatpost.com/google-sites-solarmarket-rat/165396/
Microsoft: SEO poisoning used to backdoor targets with malware https://www.bleepingcomputer.com/ne...soning-used-to-backdoor-targets-with-malware/