Smith discovered the prolific Smishing Triad scam by scouring Reddit for reports and URLs, uncovering websites collecting vast amounts of personal information daily. The scam sought names, addresses, payment card details, and more, enabling credit card fraud. The Triad targeted postal services and financial systems globally, selling smishing kits for $200/month. Loveland of Resecurity noted the kit’s backdoor allows the creator access to administrator details. The group primarily communicates in Chinese and sells the scamming tool on Telegram. With text messages as a successful phishing method, vigilance is key against unfamiliar links or urgent requests. The FBI and USPIS are investigating Smith’s findings.
https://www.wired.com/story/usps-scam-text-smishing-triad/