Fake bank websites play dead to evade security scanners

A phishing method, named Chameleon SEO Poisoning, that uses manipulated search results and cloaked fake banking websites to steal credentials while evading security scanners has been discovered by Fortra. The company’s threat intelligence unit, Fortra Intelligence and Research Experts (FIRE), spent three months tracking the technique and reports a 40% jump in cases during the second quarter of 2026. Attackers rank these pages for high-intent keywords such as “Bank Name Customer Portal” or “Credit Card … More → The post Fake bank websites play dead to evade security scanners appeared first on Help Net Security.