Bank phishing sites evade takedowns with fake suspension pages
Cybercriminals are deploying phishing sites that serve legitimate-looking 'suspended' pages to visitors who return, while showing phishing content to first-time visitors. Over 200 sites used this evasion technique. This prevents automated takedown systems and security researchers from detecting the phishing infrastructure. Organizations should educate users to verify bank URLs directly and enable MFA to mitigate phishing risks.