That hits AI Overview tracking as well. Most of those tools scrape the same results page, so a poisoned SERP poisons their citation counts too, and nobody downstream would notice unless they compare against a logged in manual check now and then.