Chinese phishing gangs grow into a force to be reckoned with

Google Threat Intelligence Group (GTIG) reports growing Chinese-language phishing-as-a-service (PhaaS) operations that provide turnkey phishing capabilities—including AI-driven dynamic page generation, real-time interception of credentials/OTPs to bypass MFA, and conversion of stolen payment data into tokenized assets—leveraging encrypted channels and Telegram for promotion and targeting non-Chinese entities across many countries.