Chinese-Speaking Cybercriminals Launch Large-Scale iMessage Smishing Campaign in U.S.

A new large-scale smishing campaign is targeting the U.S. by sending iMessages from compromised Apple iCloud accounts with the aim to conduct identity theft and financial fraud.

The cybercrime group, dubbed Smishing Triad, is also said to be in the business of fraud-as-a-service.

According to Resecurity, the smishing kit they analyzed revealed an SQL injection vulnerability that it said allowed them to retrieve over 108,044 records of victims’ data.

Besides these types of fraud, SmishingTriad is also known to indulge in Magecart-like attacks that invade online shopping platforms with malicious code injections to intercept customer data.

The threat group’s tactics, techniques, and procedures combine two well-established methods: social engineering and the deployment of a phishing kit via iMessage.

#shorts #techshorts #technews #tech #technology #Triad #smishing kit #kits

👋 Feeling the vibes?

Keep the good energy going by checking out my Amazon affiliate link for some cool finds! 🛍️

If not, consider contributing to my caffeine supply at Buy Me a Coffee ☕️.

Your clicks = cosmic support for more awesome content! 🚀🌈