Tech support scammers have created over 3,000 pages on the Microsoft TechNet portal to promote various shady services.

The reason for invading Microsoft's portal was to gain a reputational boost from the microsoft.com domain, allowing their shady ads to appear higher in search results than if they would have if they used self-hosted websites.

All scammy pages were created on Microsoft TechNet, a portal that contains documentation for Microsoft products, discussion forums, and a downloads center for various Microsoft-related software and trialware.

The vast majority of tech support scams were set up on the gallery.technet.microsoft.com, the subdomain for the TechNet free downloads library.

"I was able to find a total of 3,090 results, ranging back to August 2018," Cody Johnston, the security researcher who found the pages over the weekend, told ZDNet in an interview. "Twelve new ones have been created in the last week."

"They seem to be targeting a range of areas that require support, from digital currency sites such as Binance or Bittrex to Google Wallet and Instagram," Johnston said.


Cody Johnston

The researcher told ZDNet he contacted Microsoft via Twitter on Sunday night, just after he found the pages.

Microsoft's staff intervened and removed the pages on the same day. Some remained cached in search engine results last night, but after a cursory search by ZDNet today, the pages were removed from Bing and Google's cached results as well.

Read more: Tech support scammers find a home on Microsoft TechNet pages | ZDNet

Posted By: Brink
11 Sep 2018