'Lucid' Phishing-as-a-Service Exploits Faults in iMessage, Android RCS

Lucid is a Chinese phishing-as-a-service platform used by the XinXin group to run highly effective, targeted iMessage and RCS phishing campaigns worldwide; it leverages end-to-end encrypted messaging, geofencing, single-use/shortened URLs, device targeting, and mobile phone farms to impersonate postal, courier, retail, and financial brands and steal credit card information, achieving observed conversion rates around 5% across 88 countries.