Scworld
Smishing Triad Expands Phishing Operations Targeting Egyptian Services
First seen 26 Nov 2025, 18:31 UTC
•
•84% similarity
•48.7
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
The Smishing Triad, a Chinese-speaking cybercrime group, has expanded its phishing operations by creating fraudulent domains that impersonate major Egyptian service providers such as Careem, Fawry, and Egypt Post. This campaign, identified by Dark Atlas, aims to facilitate fraud and data harvesting from both individuals and organizations. The operation also includes domains spoofing TikTok and UnionPay, indicating a broader strategy to exploit various platforms.
ThreatCluster AI
How this analysis works