Smishing Triad: A Global Cybercrime Syndicate Targeting Postal and Financial Networks

The report details the Smishing Triad, a China/Southeast-Asia-based organized cybercrime syndicate running global smishing campaigns that impersonate postal, banking and government services to harvest credentials and PII. It describes high-volume SMS phishing, cloned web pages, Android APK info-stealers, Telegram-based phishing kits, domain hosting patterns, and monetization via data sales and crypto laundering, and recommends telecom filtering, IOC sharing, brand takedowns, user awareness, mobile security controls and dark‑web monitoring.