Tag: smishing
-
US Officials Impersonated Via SMS and Voice Deepfakes
The FBI has warned about an ongoing smishing and vishing scheme using AI deepfakes to impersonate US officials First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/us-officials-impersonated-sms/
-
Smishing und Co.: Wie Cyberkriminelle eure SMS in eine Falle verwandeln
Tags: smishingFirst seen on t3n.de Jump to article: t3n.de/news/smishing-und-co-wie-cyberkriminelle-eure-sms-in-eine-falle-verwandeln-1679869/
-
Scammers are deepfaking voices of senior US government officials, warns FBI
They’re smishing, they’re vishing First seen on theregister.com Jump to article: www.theregister.com/2025/05/16/fbi_deepfake_us_government_warning/
-
Colossal Chinese Panda Shop smishing campaign examined
First seen on scworld.com Jump to article: www.scworld.com/brief/colossal-chinese-panda-shop-smishing-campaign-examined
-
Smishing Triad Upgrades Tools and Tactics for Global Attacks
Global smishing campaigns linked to Chinese cybercriminals escalate with Smishing Triad’s new tools and techniques First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/smishing-triad-upgrades-tools/
-
Darcula PhaaS: 884,000 Credit Card Details Stolen from 13 Million Global User Clicks
The Darcula group has orchestrated a massive phishing-as-a-service (PhaaS) operation, dubbed Magic Cat, compromising an estimated 884,000 credit card details from over 13 million user interactions worldwide. This smishing (SMS phishing) campaign, first detected in December 2023, impersonates trusted brands like the Norwegian Postal Service to lure victims into divulging sensitive information. Sophisticated Phishing-as-a-Service Operation…
-
Smishing on a Massive Scale: ‘Panda Shop’ Chinese Carding Syndicate
Resecurity found a new smishing kit called ‘Panda Shop,’ mimicking Smishing Triad tactics with improved features and new templates. Resecurity (USA) was the first company to identify the Smishing Triad, a group of Chinese cybercriminals targeting consumers across the globe. In August 2023, our team was able to identify their activity and locate the smishing…
-
Smishing on a Massive Scale: Panda Shop Chinese Carding Syndicate
First seen on resecurity.com Jump to article: www.resecurity.com/blog/article/smishing-massive-scale-panda-shop-chinese-carding-syndicate
-
Darcula phishing toolkit gets AI boost, democratizing cybercrime
Tags: ai, apt, attack, automation, awareness, china, credentials, cybercrime, defense, detection, endpoint, finance, google, government, group, infrastructure, malicious, network, phishing, resilience, risk, service, skills, smishing, threat, tool, training, updateAI creates push-button phishing attacks: With the latest update to the “darcula-suite” toolkit, users can now generate phishing pages using generative AI that mimics websites with near-perfect accuracy, and in any language.”Users provide a URL of a legitimate brand or service, and the tool automatically visits that website, downloads all of its assets, and renders…
-
Chinese Smishing Kit Powers Widespread Toll Fraud Campaign Targeting U.S. Users in 8 States
Cybersecurity researchers are warning of a “widespread and ongoing” SMS phishing campaign that’s been targeting toll road users in the United States for financial theft since mid-October 2024.”The toll road smishing attacks are being carried out by multiple financially motivated threat actors using the smishing kit developed by ‘Wang Duo Yu,’” Cisco Talos researchers Azim…
-
The Smishing Triad Surge: Text-Based Threats Are Getting Smarter, Not Simpler
What began as a trickle of spammy messages has evolved into a sophisticated and dangerous phishing campaign. The Smishing Triad, an active cybercriminal group, is behind a surge of SMS-based phishing attacks (smishing) targeting organizations across sectors”, from healthcare to logistics to finance. Their focus? Gaining access to internal portals and enterprise email accounts by…
-
USPS Warns Public About Rising Mail, Email Scams”, How to Spot and Avoid Them
Discover how evolving USPS mail scams highlight growing cybersecurity risks. Learn how phishing, smishing, and brushing attacks threaten your personal data. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/cybersecurity/usps-warns-mail-email-scams/
-
Smishing Campaign Hits Toll Road Users with $5 Payment Scam
Cybersecurity researchers at Cisco Talos have uncovered a large-scale smishing campaign targeting toll road users across the United States. The campaign, which has been active since October 2024, impersonates toll road payment services, luring unsuspecting victims into revealing their personal and financial information through fraudulent payment requests. The Scam Unveiled The smishing campaign revolves around…
-
Smishing Triad: The Scam Group Stealing the World’s Riches
Millions of scam text messages are sent every month. The Chinese cybercriminals behind many of them are expanding their operations”, and quickly innovating. First seen on wired.com Jump to article: www.wired.com/story/smishing-triad-scam-group/
-
Unraveling the U.S. toll road smishing scams
Cisco Talos has observed a widespread and ongoing financial theft SMS phishing (smishing) campaign since October 2024 that targets toll road users in the United States of America. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/unraveling-the-us-toll-road-smishing-scams/
-
Toll payment service-targeted schemes by Smishing Triad escalates
First seen on scworld.com Jump to article: www.scworld.com/brief/toll-payment-service-targeted-schemes-by-smishing-triad-escalates
-
Smishing Triad Expands Fraud Campaign, Targets Toll Payment Services
A China-based cybercriminal group known as the Smishing Triad is escalating its smishing activities, now targeting consumers in the US and UK with fraudulent text messages related to toll payment services. The Resecurity report reveals that these campaigns involve deceptive text messages that claim unpaid toll bills or payment requests linked to services like FasTrak,…
-
Threat Actors Exploit Toll Payment Services in Widespread Hacking Campaign
In a sophisticated cybercrime operation, the Smishing Triad, a China-based group, has been identified as the orchestrator behind a surge in smishing campaigns targeting consumers in the US and UK. These campaigns exploit toll payment services like FasTrak, E-ZPass, and I-Pass, with expectations of expanding globally. The Smishing Triad’s Modus Operandi The group employs fraudulent…
-
Smishing Triad Fuels Surge in Toll Payment Scams in US, UK
A rise in smishing campaigns impersonating toll service providers has been linked to China’s Smishing Triad First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/smishing-triad-toll-payment-scams/
-
Smishing, Vishing und mehr: 9 Phishing-Angriffe, die ihr unbedingt kennen solltet
First seen on t3n.de Jump to article: t3n.de/news/smishing-vishing-und-mehr-9-pishing-angriffe-die-ihr-kennen-solltet-1679869/
-
Smishing Triad is Now Targeting Toll Payment Services in a Massive Fraud Campaign Expansion
First seen on resecurity.com Jump to article: www.resecurity.com/blog/article/smishing-triad-is-now-targeting-toll-payment-services-in-a-massive-fraud-campaign-expansion
-
The Evolution of Smishing: 3 Ways to Detect and Prevent Attacks
Smishing has evolved dramatically in recent years, with increased attack frequency and a much higher quality of the fraudulent landing pages. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/the-evolution-of-smishing-3-ways-to-detect-and-prevent-attacks/
-
Surge in Smishing Fueled by Lucid PhaaS Platform
Chinese-Speaking Operators Have Made Lucid a ‘Primary Source’ of Phishing. Security researchers say they expect a surge this year in text message smishing fueled by a phishing-as-a-service platform operated by Chinese-speaking threat actors. Lucid already is a primary source of phishing campaigns targeting users in Europe, the United Kingdom and the United States. First seen…
-
Lucid PhaaS Hits 169 Targets in 88 Countries Using iMessage and RCS Smishing
A new sophisticated phishing-as-a-service (PhaaS) platform called Lucid has targeted 169 entities in 88 countries using smishing messages propagated via Apple iMessage and Rich Communication Services (RCS) for Android.Lucid’s unique selling point lies in its weaponizing of legitimate communication platforms to sidestep traditional SMS-based detection mechanisms.”Its scalable, First seen on thehackernews.com Jump to article: thehackernews.com/2025/04/lucid-phaas-hits-169-targets-in-88.html
-
Von Smishing bis Whaling: 9 Arten von Phishing-Angriffen, die ihr kennen solltet
First seen on t3n.de Jump to article: t3n.de/news/smishing-bis-whaling-neun-arten-von-phishing-angriffen-1679869/
-
Who is sending those scammy text messages about unpaid tolls?
The latest smishing scam follows a familiar process as ones the industry has seen over the past decade. First seen on cyberscoop.com Jump to article: cyberscoop.com/toll-road-text-message-scam-swells-nationwide-how-to-stop/
-
Surge in IRS and Tax-Themed Cyber Attacks Driven by Fresh Domain Registrations
The months of January through April, marking the U.S. tax season, have seen a sharp rise in malicious cyber activity targeting taxpayers. Broadcom’s Symantec Security Center has identified a surge in IRS and tax-themed phishing campaigns, smishing attacks, and fraudulent domain registrations designed to deceive individuals and organizations. These campaigns exploit the urgency of tax…
-
USPS Impersonators Tap Trust in PDFs in Smishing Attack Wave
Attackers aim to steal people’s personal and payment-card data in the campaign, which dangles the threat of an undelivered package and has the potential to reach organizations in more than 50 countries. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/usps-impersonators-pdfs-smishing-campaign