Inside the GitHub Phishing Kits Impersonating Banks

A phishing page served from a github.io subdomain inherits three things its operator never had to buy or configure: a valid TLS certificate on a GitHub-controlled domain, a parent domain with enough legitimate traffic that reputation engines score it neutral or better, and free static hosting that survives the first round of abuse reports because […] The post Inside the GitHub Phishing Kits Impersonating Banks appeared first on CybelAngel .