BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams
- ID
- 22288
- Status
- summarized
- Published
- 08 Sep 2026, 4:43 PM
- Fetched
- 08 Sep 2026, 5:56 PM
- Provider
- The Hacker News
- Category
- security
- Original URL
- https://thehackernews.com/2026/09/bengalseo-poisons-bing-search-results.html
- Source URL
- https://feeds.feedburner.com/TheHackersNews
Summary
- Score
- 4.5
- Created
- 08 Sep 2026, 6:01 PM
- Tags
- Audience
- developerssaas_founders
What happened
The DFIR Report detailed BengalSEO, an SEO poisoning campaign operating from Rajasthan, India since at least 2015, run by two IT service providers (WeConnect Solutions LLC and Garage2Global). The campaign uses black-hat SEO to push malicious lure pages to the top of Bing search results, impersonating tech support and streaming service activation portals, then routes victims through a traffic distribution system to deliver a custom malware called MayaBot (C2, system monitoring, XMRig miner) or tech support scam call centers.
Why it matters
If you ship consumer-facing SaaS or support portals, your customers may encounter impersonator pages outranking your legitimate site on Bing — review your brand's search result positioning and consider proactive monitoring for typosquatted or impersonating domains, since this campaign specifically targets service activation and tech support flows.
Discussion angle
How easily black-hat SEO can outrank legitimate support pages on Bing, and what practical domain-monitoring or takedown steps a small Malaysian SaaS team can realistically afford if impersonators target their brand.