• About Us
  • Privacy Policy
  • Disclaimer
  • Contact Us
TechTrendFeed
  • Home
  • Tech News
  • Cybersecurity
  • Software
  • Gaming
  • Machine Learning
  • Smart Home & IoT
No Result
View All Result
  • Home
  • Tech News
  • Cybersecurity
  • Software
  • Gaming
  • Machine Learning
  • Smart Home & IoT
No Result
View All Result
TechTrendFeed
No Result
View All Result

Surge in Smishing Fueled by Lucid PhaaS Platform

Admin by Admin
April 2, 2025
Home Cybersecurity
Share on FacebookShare on Twitter


Fraud Administration & Cybercrime
,
Social Engineering

Chinese language-Talking Operators Have Made Lucid a ‘Major Supply’ of Phishing

Prajeet Nair (@prajeetspeaks) •
April 2, 2025    

Surge in Smishing Fueled by Lucid PhaaS Platform
Do not click on on that hyperlink. (Picture: Pennsylvania Turnpike Fee / ISMG)

Safety researchers say they count on a surge this 12 months in textual content message smishing fueled by a phishing-as-a-service platform operated by Chinese language-speaking risk actors.

See Additionally: Dwell Webinar | AI-Powered Protection In opposition to AI-Pushed Threats

The platform, known as Lucid, permits large-scale smishing campaigns lively in 88 international locations. The platform permits attackers to ship malicious hyperlinks to Apple iMessage and Android’s Wealthy Communication Companies. It affords a built-in bank card generator for one-stop-shop validation by hackers of stolen cost knowledge.

Lucid already is a major supply of phishing campaigns concentrating on customers in Europe, the UK and the US. “Initially working at an area stage, its influence has grown considerably, with a major surge anticipated by early 2025,” warn researchers at risk intel agency Catalyst.

Lucid operates on a subscription-based mannequin, permitting cybercriminals to launch automated and customizable phishing assaults. The service consists of superior anti-detection mechanisms corresponding to IP blocking and user-agent filtering, prolonging the lifespan of phishing websites.

The group behind Lucid, also referred to as “Black Expertise” or “XinXin,” has been lively since 2023. The service is primarily used to steal bank card particulars and personally identifiable data by means of texts that masquerade as originating from professional organizations corresponding to postal providers, courier corporations and authorities businesses. Within the U.S., customers have reported a surge over the previous 12 months of smishing texts purporting to come back from a street toll assortment service. The FBI printed a warning in regards to the rip-off in 2024. Shoppers apparently proceed to be hoodwinked, inflicting the U.S. Federal Commerce Fee to warn about it in January, the Colorado state authorities to alert drivers earlier this 12 months and the lawyer basic of Vermont to publish in March a rip-off warning.

Catalyst wrote that operational knowledge indicated that Lucid-driven campaigns have a median success charge of roughly 5%.

Lucid operates over the web somewhat than by means of telecom networks. This method will increase message supply charges and in addition permits attackers to evade telecom filtering mechanisms. Lucid additionally employs obfuscation methods, corresponding to time-limited URLs and machine fingerprinting, to evade detection by safety analysts and automatic risk intelligence programs.

Its phishing pages are tailor-made to victims’ areas, mimicking the web sites of native organizations to look extra convincing. The service additionally exploits automation instruments that permit attackers to create and deploy phishing campaigns with minimal effort.

Lucid gives a structured assault infrastructure. Menace actors purchase cellphone numbers by means of knowledge breaches, open-source intelligence gathering and underground marketplaces.

The platform is one in all a number of PhaaS platforms alongside providers corresponding to Darcula and Lighthouse (see: Phishing-as-a-Service Platform Provides Lower-Charge Costs).

The group behind Lucid actively markets its providers on Telegram, the place it advertises their capability to ship over 100,000 smishing messages day by day. Lucid seems to function on a hierarchical construction, supporting a number of roles, together with directors, workers and visitor customers. Licenses for the platform are offered on a weekly foundation, with automated suspension if not renewed.



Tags: FueledLucidPhaaSPlatformSmishingSurge
Admin

Admin

Next Post
OpenAI’s o3 mannequin may be costlier to run than initially estimated

OpenAI's o3 mannequin may be costlier to run than initially estimated

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Trending.

Discover Vibrant Spring 2025 Kitchen Decor Colours and Equipment – Chefio

Discover Vibrant Spring 2025 Kitchen Decor Colours and Equipment – Chefio

May 17, 2025
Reconeyez Launches New Web site | SDM Journal

Reconeyez Launches New Web site | SDM Journal

May 15, 2025
Safety Amplified: Audio’s Affect Speaks Volumes About Preventive Safety

Safety Amplified: Audio’s Affect Speaks Volumes About Preventive Safety

May 18, 2025
Flip Your Toilet Right into a Good Oasis

Flip Your Toilet Right into a Good Oasis

May 15, 2025
Apollo joins the Works With House Assistant Program

Apollo joins the Works With House Assistant Program

May 17, 2025

TechTrendFeed

Welcome to TechTrendFeed, your go-to source for the latest news and insights from the world of technology. Our mission is to bring you the most relevant and up-to-date information on everything tech-related, from machine learning and artificial intelligence to cybersecurity, gaming, and the exciting world of smart home technology and IoT.

Categories

  • Cybersecurity
  • Gaming
  • Machine Learning
  • Smart Home & IoT
  • Software
  • Tech News

Recent News

How authorities cyber cuts will have an effect on you and your enterprise

How authorities cyber cuts will have an effect on you and your enterprise

July 9, 2025
Namal – Half 1: The Shattered Peace | by Javeria Jahangeer | Jul, 2025

Namal – Half 1: The Shattered Peace | by Javeria Jahangeer | Jul, 2025

July 9, 2025
  • About Us
  • Privacy Policy
  • Disclaimer
  • Contact Us

© 2025 https://techtrendfeed.com/ - All Rights Reserved

No Result
View All Result
  • Home
  • Tech News
  • Cybersecurity
  • Software
  • Gaming
  • Machine Learning
  • Smart Home & IoT

© 2025 https://techtrendfeed.com/ - All Rights Reserved