Bank Phishing Sites Show Fake ‘Suspended’ Pages to Evade Takedowns
Summary
Phishing sites targeting banks are employing a new tactic by showing fake 'suspended' pages to first-time visitors, but revealing the actual phishing content to repeat visitors. This technique aims to evade detection by security researchers and automated takedown systems that may only visit a site once.
IFF Assessment
This article details a new, sophisticated evasion technique used by phishing operations, making it harder for defenders to identify and take down malicious sites.
Defender Context
Defenders need to be aware of evolving phishing techniques that go beyond simple page content. This particular evasion method highlights the need for deeper analysis of website behavior and potentially more sophisticated monitoring tools that can detect variations in content delivery.