DCloud Uni-App Scam Network Powers RainbowEx

Cybersecuritynews •Tushar Subhra Dutta • June 29, 2026

A Chinese open-source development framework has become the silent engine behind one of the largest scam networks ever documented. Known as DCloud Uni-App, the cross-platform toolkit was designed for legitimate app development but has been repurposed by cybercriminals to run a sprawling operation involving fake crypto exchanges, phishing sites, and investment traps. More than 236,000 […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

DCloud Uni-App Framework Fuels Global Scam Network with 236,000+ Domains The DCloud Uni-App framework, originally intended for legitimate app development, has been exploited by cybercriminals to create a vast network of scams, including over 236,000 distinct fraudulent domains. These scams encompass fake crypto exchanges, phishing sites, and investment traps, affecting numerous organizations across various sectors. Infoblox Threat Intel reported over five million attempts to connect to these scam sites from 985 organizations in 25 industries. The operations have expanded to include physical-world fraud schemes, with new brands emerging to replace those shut down by authorities. The scale of this operation highlights a shift in consumer fraud, now impacting business networks and raising concerns at the board level. Security professionals are urged to recognize the growing threat as traditional phishing training may not suffice to address these new risks. 4 sources 67

Extracted Entities

DCloud Uni-App Scam Network Powers RainbowEx

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Tools (1)