Alert: Chinese-Speaking Hackers Pose as UAE Authority in Latest Smishing Wave

The report details an active smishing campaign by the group 'Smishing Triad' that impersonates the UAE Federal Authority for Identity and Citizenship to send shortened SMS links leading to a spoofed site (example domain rpjpapc.top) that harvests names, passport numbers, contact and card data; operators use compromised iCloud accounts, SMS spoofing/spam services, geofencing to limit exposure to UAE IPs/devices, and operate a fraud-as-a-service model alongside activity on the OLVX marketplace. The disclosure also covers abuse of the open-source Predator anti-bot tool by phishers to detect and evade automated analysis and filtering.