{"success":true,"data":{"id":"csn-brand-phish","label":"Fake CSN (Swedish student loan authority) brand spoof — urgency + off-domain link.","description":"Fake CSN (Centrala studiestödsnämnden — Swedish Board of Student Finance) brand-spoof phishing. CSN administers studiemedel for ~900K annual recipients. Attackers send fake \"återbetalning förfallen\" notices demanding payment to off-brand portals. Fires when: CSN brand/studiemedel vocabulary + urgency/payment language + all hrefs off csn.se + no List-Unsubscribe + no In-Reply-To. Source: GE-R8; CSN security advisory 2025.","tier":"danger","category":"phishing","isThin":false}}