BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams

Summary

A widespread SEO poisoning campaign dubbed BengalSEO has been discovered, which manipulates Bing search results to distribute malware and facilitate tech support scams. This campaign, operating from Rajasthan, India since at least 2015, is linked to two IT service providers, WeConnect and Tech24.

IFF Assessment

FOE

This campaign poses a threat to users by delivering malware and engaging in fraudulent tech support scams, making it bad news for defenders.

Defender Context

Defenders should be aware of sophisticated SEO poisoning tactics that can be used to trick users into downloading malware or falling for scams. This highlights the need for robust endpoint protection and user education regarding suspicious search result links.

Read Full Story →