Back Thehackernews

236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers

Thehackernews •[email protected] (The Hacker News) • June 29, 2026

Learn how to uncover hidden AI use, see what data it can access, map every AI action to a human owner, and apply practical governance without heavy infrastructure changes.

Learn how to contain Mythos-style AI attacks with practical Zero Trust controls that reduce exposure, stop lateral movement, and limit risk.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

DCloud Uni-App Framework Fuels Global Scam Network with 236,000+ Domains The DCloud Uni-App framework, originally intended for legitimate app development, has been exploited by cybercriminals to create a vast network of scams, including over 236,000 distinct fraudulent domains. These scams encompass fake crypto exchanges, phishing sites, and investment traps, affecting numerous organizations across various sectors. Infoblox Threat Intel reported over five million attempts to connect to these scam sites from 985 organizations in 25 industries. The operations have expanded to include physical-world fraud schemes, with new brands emerging to replace those shut down by authorities. The scale of this operation highlights a shift in consumer fraud, now impacting business networks and raising concerns at the board level. Security professionals are urged to recognize the growing threat as traditional phishing training may not suffice to address these new risks. 4 sources 67

Extracted Entities

236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Tools (1)