Chinese-Language Phishing Kits Are Growing More Advanced

Google Threat Intelligence Group (GTIG) warns that Chinese-language phishing-as-a-service (PhaaS) kits are increasingly sophisticated, enabling real-time interception of OTPs and tokenization of payment data to facilitate direct financial account takeovers. Operators leverage end-to-end messaging protocols like RCS and iMessage to bypass server-side filters and make lures appear more legitimate, lowering the barrier to entry for financially-motivated cybercriminals.