Smishing Operation Impersonating USPS
Security researcher uncovers massive 'smishing' operation impersonating USPS, hacks into fraudsters' systems, collects evidence, and assists in ongoing investigation by USPIS.
Key Points
- Grant Smith, a red team engineer, led the investigation
- Scammers operated through 1,133 fraudulent domains
- The 'Smishing Triad' sells a smishing kit for $200 monthly subscription on Telegram
- USPIS is actively working on the case based on Smith's findings
Pros
- Security researcher exposed the scam and collected evidence
- Assisted in ongoing investigation by USPIS
Cons
- Over 1.2 million pieces of personal information collected by scammers
- Many victims fell for the scam and entered credit card details