Phishing Services Use RCS and iMessage to Bypass Traditional SMS Security Filters

Cybersecuritynews •Tushar Subhra Dutta • May 26, 2026

A new wave of phishing operations is quietly changing the way cybercriminals steal financial data from everyday people. Rather than relying on traditional SMS messages that carriers can easily flag and block, threat actors are now using encrypted messaging channels like Rich Communication Services (RCS) and Apple iMessage to deliver malicious links directly to victims’ […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Phishing Campaigns Leverage RCS and iMessage to Evade SMS Security A new wave of phishing campaigns is utilizing encrypted messaging services like RCS and iMessage to bypass traditional SMS security filters. Attackers are moving away from conventional SMS phishing methods, which are easier for carriers to detect and block. Instead, they are exploiting the end-to-end encryption of these messaging platforms to deliver malicious links directly to victims. This shift poses a significant risk to users, as it enables real-time account takeover and increases the likelihood of financial data theft. The campaigns are particularly targeting everyday individuals who may not be aware of the heightened risk associated with these messaging services. As of now, there are no specific numbers or CVEs reported related to these phishing operations, but the trend indicates a growing sophistication in cybercriminal tactics. 2 sources 49

Extracted Entities

Phishing Services Use RCS and iMessage to Bypass Traditional SMS Security Filters

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (2)