Chinese-Backed Smishing Rings Scale Credential Theft via SMS and OTT Apps

This report describes the rapid global expansion of Chinese-language phishing-as-a-service (PhaaS) ecosystems that use SMS (smishing) and OTT messaging (iMessage, RCS) to deliver credential theft campaigns. Researchers observed organized, scalable operations leveraging SIM box infrastructure, centralized backend phishing frameworks, and affiliate models to run cross-border campaigns at industrial scale; the series of upcoming urlscan.io reports will provide deeper visibility into these operations and mitigation guidance.