← Back to Feed
Flash Alert: From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira
August 5, 2025 · DFIR Report · Severity: CRITICAL
Overview Bumblebee malware has been an initial access tool used by threat actors since late 2021. In 2023 the malware was first reported as using SEO poisoning as a delivery mechanism. Recently in May of 2025 Cyjax reported on a campaign using this method again, impersonating various IT tools. We observed a similar campaign in […] The post Flash Alert: From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira appeared first on The DFIR Report.
Key Takeaways
- Bumblebee malware has served as an initial access tool using SEO poisoning since 2023.
- The campaign impersonates various IT tools to deliver malware from search results.
- Bumblebee and AdaptixC2 were used to deliver the Akira ransomware.