{"success":true,"data":{"id":"nis2-csirt-phish","label":"Fake NIS2/CSIRT 24h/72h mandatory incident disclosure lure — deadline + off-official-domain link.","description":"Fake NIS2 Directive (EU 2022/2555) / CSIRT 24h or 72h mandatory incident disclosure lure. NIS2 requires essential entities to submit early warning within 24h and detailed report within 72h; non-compliance fines reach €10M. Attackers impersonate ENISA, CSIRT, NCSC, or cert.se with fake deadline notices linking to off-official portals. Fires when: NIS2/CSIRT/ENISA vocabulary + 24h/72h urgency + all hrefs off enisa.europa.eu/ncsc.gov.uk/cert.se/msb.se + no List-Unsubscribe + no In-Reply-To. Source: GE-R8; ENISA NIS2 guide 2024.","tier":"danger","category":"phishing","isThin":false}}