Unhappy to report the phishing one is quickly becoming a real problem now. Why go to the trouble of social engineering when people will just give up their ID, financial info, biometrics, etc. to an AV portal? There's no standards so how can you differentiate a fake one from a real one?
