New Phishing Toolkit Uses Whitelisting To Keep Scams Alive

RSA researchers disclosed a phishing toolkit called "Bouncer" used in targeted campaigns against banks in South Africa, Australia and Malaysia; it creates a unique URL per intended victim, whitelists those targets (redirecting others to a 404 page to evade detection), and hosts per-victim pages on compromised legitimate sites (via vulnerable WordPress plugins) to harvest banking credentials.