New Phoenix Platform Drives Brand-Impersonation Smishing

The report describes a surge in smishing campaigns enabled by the Phoenix System PhaaS, which uses techniques like rogue base transceiver stations (BTS) to inject spoofed SMS, geofencing and targeted lures (reward points, failed parcel notifications), and live OTP interception to bypass MFA; the platform is commercialized, widely distributed (≈13,000 community members), and actively marketed via Telegram, posing significant fraud risk to financial, telecom, and logistics sectors.