Phishing Campaigns Exploit RCS and iMessage to Evade SMS Security Filters

Gbhackers •Mayura Kathir • May 26, 2026

Phishing campaigns are entering a new phase as attackers abandon traditional SMS delivery and static credential theft in favor of encrypted messaging channels and real-time account takeover techniques. Unlike conventional SMS phishing, RCS and iMessage operate over data networks with end-to-end encryption, limiting carriers’ ability to inspect or block malicious content. Threat actors are exploiting […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Phishing Campaigns Leverage RCS and iMessage to Evade SMS Security A new wave of phishing campaigns is utilizing encrypted messaging services like RCS and iMessage to bypass traditional SMS security filters. Attackers are moving away from conventional SMS phishing methods, which are easier for carriers to detect and block. Instead, they are exploiting the end-to-end encryption of these messaging platforms to deliver malicious links directly to victims. This shift poses a significant risk to users, as it enables real-time account takeover and increases the likelihood of financial data theft. The campaigns are particularly targeting everyday individuals who may not be aware of the heightened risk associated with these messaging services. As of now, there are no specific numbers or CVEs reported related to these phishing operations, but the trend indicates a growing sophistication in cybercriminal tactics. 2 sources 49

Extracted Entities

Phishing Campaigns Exploit RCS and iMessage to Evade SMS Security Filters

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (2)