Bank phishing kit shows fake 'suspended' page to anyone who checks twice
ResearchBrief2 min read
Kela says the cluster has used more than 300 fake domains, 248 of them impersonating 189 US financial institutions, and that a repeat visit gets a closed-hosting notice instead of the login page.