During these automated campaigns, bad actors deploy bots to scan vulnerable websites—such as localized blogs, open forums, or portfolio galleries. Once an unmoderated comment section or guestbook is found, the bot injects random blocks of text appended with these specific keywords and hidden hyperlinks. How the Bait-and-Switch Works