{"success":true,"data":{"id":"helpdesk-phishing","label":"Helpdesk phishing — fake support ticket + verify identity to view reply (credential harvest)","description":"Body contains both a support-ticket notification (\"you have a new support ticket\", \"our support agent has replied to your case\", \"your helpdesk ticket has been updated\") AND a verify-identity-to-view demand (\"verify your identity to access the ticket\", \"identity verification required to view the reply\", \"click to confirm your account to open the support message\"). Real helpdesk tools (Zendesk, Intercom, Freshdesk) give you a direct link to the reply — they never ask you to verify your identity or confirm your account credentials before you can read a support message. This gating step is unique to the phishing variant and signals a credential-harvesting login page.","tier":"danger","category":"phishing","isThin":false}}