News Summary

• Cybersecurity researchers have disclosed details of a sprawling search engine optimization (SEO) poisoning campaign.
• The campaign, discovered by the DFIR Report in March 2026, has been codenamed BengalSEO.
• It has operated out of the Indian state of Rajasthan since at least 2015, driven by two IT service providers named WeConnect Solutions LLC (previously iConnect Soft Solutions LLC) and Garage2Global.
• One of the payloads is a custom malware dubbed MayaBot, which is responsible for enabling command-and-control (C2), system monitoring, and delivering an XMRig cryptocurrency miner.