Researchers have come across an ANZ phishing scam that leverages compromised educational and government websites from China.
According to ThreatTrack Securitys Chris Boyd, the attackers first need to lure users to a page hosted in the /images/online folder on the website of the county-level city of Shangyu (syftec[dot]gov[dot]cn).
From here, victims are redirected to a subdomain of an educational institutions website dedicated to a project …