Gambling Goblin: A Chinese-Speaking Actor Hijacks Brazilian Government Sites to Fuel a Global SEO Fraud Machine
Check Point, Wednesday, September 2nd, 2026
Check Point Research tracks Gambling Goblin, which compromises Brazilian government web servers to power a global SEO fraud operation.
Check Point Research has named a Chinese-speaking threat actor Gambling Goblin, which compromises trusted government websites and converts them into infrastructure for a fraud operation built to scale.
The group targets legitimate Brazilian government web servers and manipulates them to serve content that feeds a global search engine optimization fraud machine. Using the reputation of government domains lets the operation rank content that would otherwise be filtered or demoted. The report lays out the group's key findings, techniques and the scale of the compromised infrastructure.