Smishing Triad Impersonation Campaigns is a threat campaign tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed November 25, 2025; most recent activity November 25, 2025.
Smishing Triad Impersonation Campaigns refer to a global wave of SMS-based fraud where threat actors impersonate trusted brands or authorities using a three-pronged (triad) impersonation approach to persuade victims to reveal credentials, click malicious links, or authorize payments. The campaigns are notable for their scale, cross-border reach, and sophisticated social-engineering tactics that exploit mobile messaging channels.
The Smishing Triad, a Chinese-speaking cybercrime group, has expanded its phishing operations by creating fraudulent domains that impersonate major Egyptian service providers such as Careem, Fawry, and Egypt Post. This…