The World Bank and its Climate-smart Planning Platform (CSPP) webpage hosted a hidden PayPal login scam. The sites certificate has been revoked, and most Web browsers prevent access to the CSPP website. Phishing remains a common tactic for attackers looking to grab victim credentials. The cornerstone of any phishing attack is trust: Users must be made to believe the content theyre seeing is legitimate, and this typically demands significant effort on the part of malicious actors to create official-looking webpages.”]
Source: https://securityintelligence.com/news/hooked-phishing-scheme-reels-in-world-bank-site/