BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams

BengalSEO is a financially motivated threat actor operating since at least 2015 from Rajasthan, India, using black hat SEO techniques to poison Bing search results and promote malicious lure pages. These pages are used to deliver the MayaBot malware via JavaScript droppers or redirect victims to tech support scams. The group uses a sophisticated traffic distribution system (TDS) with cloaking, fingerprinting via Matomo analytics, and abuse of trusted hosting platforms like GitHub Pages and Cloudflare to evade detection. The infrastructure includes multiple redirector domains, malicious ZIP files, and lure pages hosted across high-reputation services to manipulate search rankings and deliver payloads.

AI-extracted · verify before operational use