Phishing platform 'Lucid' behind wave of iOS, Android SMS attacks
ID: 088e6431-f26e-58fa-815d-097ecd98d773
STIX ID: report--088e6431-f26e-58fa-815d-097ecd98d773
Feed Name: Bleeping Computer
Threat Score
Lucid is a subscription-based phishing‑as‑a‑service used by the XinXin group to run mass smishing campaigns across iMessage and Android RCS, targeting 169 entities in 88 countries. The platform provides over 1,000 phishing domains, auto-generated phishing sites, device farms for message delivery, pro-grade spamming tools, and a built-in credit-card validator; subscriptions are sold via a Telegram channel, enabling wide distribution and ongoing fraud operations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.