Smishing Triad Linked to 194,000 Malicious Domains in Global Phishing Operation
The Smishing Triad, a China-linked group, has been linked to over 194,000 malicious domains since January 2024 in a global phishing operation, generating over $1 billion in the last three years by impersonating services like toll violations and package misdeliveries. This sophisticated operation utilizes a decentralized infrastructure, rapidly registering and churning through domains to evade detection, with a significant portion hosted on U.S. cloud services.