Bank Phishing Sites Deploy Fake Suspended Pages to Evade Takedowns

# Bank Phishing Sites Deploy Fake Suspended Pages to Evade Takedowns

https://gcdradar.vercel.app/incidents/bank-phishing-sites-deploy-fake-suspended-pages-to-evade-tak · AIR-2026-1804 · live

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation): Confirmed real-world attack campaign.
- Fix status: No fix needed
- First reported: 2026-11-05
- AI role: No AI role

## Summary

Threat actors deployed over 200 phishing sites that display benign suspended pages to returning visitors to avoid detection. The campaign specifically targeted banking customers using evasion techniques.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-11-05: Bank Phishing Sites Show Fake ‘Suspended’ Pages to Evade Takedowns (https://securityweek.com/bank-phishing-sites-show-fake-suspended-pages-to-evade-takedowns)

## Sources

- 2026-11-05 SecurityWeek: Bank Phishing Sites Show Fake ‘Suspended’ Pages to Evade Takedowns https://securityweek.com/bank-phishing-sites-show-fake-suspended-pages-to-evade-takedowns

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.