MASSIVE CHINA-LINKED SMISHING CAMPAIGN LEVERAGED 194,000 DOMAINS

Summary from the TLDR InfoSec newsletter

An extensive SMS phishing campaign, attributed to a Chinese-speaking group called Smishing Triad, has used over 194,000 domains since early 2024. The attackers impersonated services such as banks and delivery firms to steal personal data via urgent texts. Their tactics include cycling through disposable domains and running a phishing-as-a-service operation, making detection challenging for authorities worldwide.