'Darcula' Phishing-as-a-Service Operation Bleeds Victims Worldwide

Darcula is a Chinese-language phishing-as-a-service platform powering a widespread global package-delivery smishing campaign, with researchers attributing approximately 19,000 phishing domains across 100+ countries and an average of ~120 new domains per day; the service offers subscription access to ~200 templates, uses modern web technologies (React, Docker) and container registry Harbor, and leverages iMessage/RCS to bypass SMS defenses while primarily targeting postal services and other consumer-facing brands.