Google and Bing Search Results Used to Deliver Hidden Banking Phishing Pages

Researchers observed a surge in "Chameleon SEO Poisoning" campaigns where attackers abuse Google and Bing search results and use referral-aware cloaking to present fake banking login portals to users arriving from search engines while serving benign pages to scanners; the campaigns leverage recently registered typo-squat domains and SEO manipulation to extend phishing lifespans and evade automated detection, prompting recommendations for referrer- and user-agent-aware scanning, continuous brand-monitoring of search results, and consumer guidance to use official apps or bookmarks.