Investigation into PostalFurious: a Chinese-speaking phishing gang targeting Singapore and Australia

This Group-IB guide analyzes the PostalFurious phishing campaign (July 2022) that used smishing to redirect victims in APAC to cloned postal/toll websites to harvest credit card information and OTPs. The report explains investigation steps including domain/WHOIS analysis, source-code and phishing-kit examination (Laravel-based), admin panel discovery, victim statistics, and remediation recommendations for users and businesses.