domains Phishing campaigns are using AMP URLs to avoid detection

[Lox]

Researchers have found a new phishing tactic which uses Google Accelerated Mobile Pages (AMP) to make URLs look trustworthy. The tactic is designed to slip past both software and users on the lookout for strange and untrustworthy domain names.

.... The phishing technique uses the URL of a web page cached by the Google AMP Viewer. For example, the home page of the website example.com would appear in the Google AMP Viewer as https://www.google.com/amp/s/example.com.

read more

 

[pb]

Finally some use case for AMP.

 

[Janoss]

I thought AMP was going to be removed by Google or isn't it?