At least 121 countries, including Vietnam, are being attacked by a smishing campaign aimed at stealing sensitive information. Behind this campaign is the Smishing Triad from China, one of the most dangerous cybercrime groups today. The smishing messages are distributed from 60,000 malicious domains, targeting the postal, telecommunications, logistics, transportation, financial, retail and public sectors.

In just 20 days, Smishing Triad's infrastructure recorded more than one million visits to phishing sites, an average of 50,000 per day.

Through its own Telegram channel, Smishing Triad also released the Lighthouse phishing toolkit and sold it to other criminal groups, making it difficult to track. Experts noted that around 25,000 domains were used in each eight-day period, with the majority hosted by Chinese companies Tencent and Alibaba.

The Smishing Triad was discovered in 2023, using stolen Apple iCloud accounts to send iMessage scams. Initially targeting postal services in the United States and Europe, the group has since expanded to target major global banks.

Bkav experts recommend users:

- Never click on strange links in iMessage messages, even if they look like official notifications.

- Check the domain name carefully before entering personal information

Bkav