Lucid Phishing Platform Drives Toll Scam Campaigns

Researchers report a large-scale SMS phishing campaign that uses a Phishing-as-a-Service platform called Lucid plus device farms to send toll-road scam messages at scale. The platform auto-generates unique domains and landing pages, supports device- and region-targeting, issues time-limited URLs, and operates via an affiliate/subscription model—resulting in thousands of scam messages daily and an estimated ~5% success rate.