New iMessage Phishing Campaign Targets Postal Service Users Globally

Netcraft discovered “Darcula,” a phishing-as-a-service platform conducting large-scale iMessage and RCS smishing campaigns that impersonate postal services (including USPS) across 100+ countries to steal login credentials and payment information; the report highlights evasive tactics that bypass SMS firewalls, provides screenshots of malicious messages and phishing pages, and emphasizes the importance of user training and vigilance.