University Site Cloned to Evade Ad Detection and Distribute Fake Cisco AnyConnect Installer

The attackers are using a clever technique to evade detection by security systems. They have cloned the website of a German university that uses Cisco AnyConnect and are using it as a “white page” to fool ad detection systems.