As cited
Copy frozen at (site build).
threat intel
Bank Phishing Sites Show Fake ‘Suspended’ Pages to Evade Takedowns
Threat actors operating more than 200 phishing sites targeting banks display a fake suspension notice to repeat visitors while serving malicious content to first-time visitors, a technique designed to evade takedown efforts.
Why it matters: Bank customers and security teams managing phishing infrastructure takedowns are targeted; defenders need to understand that revisiting suspected phishing sites may appear benign, complicating detection and reporting workflows.
- Source published
- First seen by Cybersecurity Tracker