Slop Engagement Operations - The Weird Web of an AI-Fueled SEO Spambot | SLEUTHCON 2025
Presents slop Engagement Operations - The Weird Web of an AI-Fueled SEO Spambot | SLEUTHCON 2025 and evaluates key implications for security practitioners.
Summary
Overview: Alex Delmont and Jim Walter of SentinelLabs present at SLEUTHCON on "Slop Engagement Operations," an AI-fueled SEO spam bot framework called Akira targeting small business websites.
Key Topics: Akira's Python-based website scraping and content generation; OpenAI API abuse for customized spam; CAPTCHA bypass automation; hardcoded credentials in scripts; and multi-operator framework variants.
Technical Details: Researchers describe Akira scraping target websites, using Chat Completions API to generate tailored SEO spam content, and automating CAPTCHA defeat across reCAPTCHA and custom implementations. Credentials were hardcoded in plaintext across operator variants.
Takeaways: LLM-powered spam frameworks represent a new class of abuse tooling. Defenders should monitor for AI-generated content injection and protect against automated CAPTCHA-defeating submission attacks.
Related talks
Security Fest·50 min
Analysts investigate attack surfaces and defenses concerning OopsSec - The bad, the worst and the ugly of APT’s operations security- Tomer Bar- SecurityFest2023.
CYBERWARCON·10 min
Analysts investigate attack surfaces and defenses concerning Were Russian cyber operations militarily effective in Ukraine? If not, why? | CYBERWARCON 2022.
CYBERWARCON·6 min
Security researchers examine technical aspects of Influence Operations: What is Known and What Isn't? | CYBERWARCON 2021.