Smishing Triad Expands Phishing Operations Targeting Egyptian Services

Smishing Triad Expands Phishing Operations Targeting Egyptian Services

First seen 26 Nov 2025, 18:31 UTC Infosecurity-MagazineScworld 84% similarity 48.7

Article Content

Browse articles
ThreatCluster

The Smishing Triad, a Chinese-speaking cybercrime group, has expanded its phishing operations by creating fraudulent domains that impersonate major Egyptian service providers such as Careem, Fawry, and Egypt Post. This campaign, identified by Dark Atlas, aims to facilitate fraud and data harvesting from both individuals and organizations. The operation also includes domains spoofing TikTok and UnionPay, indicating a broader strategy to exploit various platforms.

ThreatCluster AI How this analysis works

Community

Browse all →

Tracked Entities in This Story