Nimbus Manticore Fake SQL Developer SEO Poisoning Download

Danny Y@zendannyy

•updated Jul 21, 2026•1•0•4

Detects execution or download activity tied to Nimbus Manticore (UNC1549) SEO poisoning campaign delivering trojanized Oracle SQL Developer from getsqldeveloper.com and related fake Zoom/career portal lures documented alongside Screening Serpens activity.