A new phishing campaign is making fake websites look trustworthy by giving them the same HTTPS security signal people usually associate with legitimate sites. Security researchers at Clandestine said they identified newly activated phishing and interface-cloning infrastructure that appears designed to target customers of high-value brands, with a primary focus on WhatsApp and Instagram. According to the researchers, SSL/TLS certificates for the suspicious domains were issued on Aug. 10 by legitimate certificate authorities, including Let’s Encrypt, Google Trust Services, and Amazon. Cyber Security News, citing Clandestine’s findings, reported that attackers can obtain valid certificates for domains they control, allowing phishing pages to load over encrypted connections even though the sites are fraudulent. They can use the same infrastructure that legitimate websites use and rely on users to interpret the resulting security indicators incorrectly.