Global SMS Phishing Campaign Traced to China Targets Users Worldwide

A recent global SMS phishing campaign, traced back to a group known as the Smishing Triad in China, poses a significant threat to users worldwide. Since January 2024, over 194,000 malicious domains have been identified, primarily targeting U.S. residents with fraudulent messages about toll violations and package misdeliveries. The campaign utilizes a decentralized infrastructure, allowing for rapid domain registration and evasion of detection.

Attackers impersonate legitimate services across various sectors, employing sophisticated social engineering tactics to extract sensitive information. The operation functions as a phishing-as-a-service ecosystem, with specialized roles for different stages of the attack supply chain. Security experts advise users to exercise caution with unsolicited messages and verify requests through official channels.