Tag: real-time credential capture

1 Attack Reports | 0 Vulnerabilities

Attack reports

The Package That Never Shipped: Following a USPS Smishing Kit Through DNS Data

A sophisticated smishing campaign impersonates United States Postal Service (USPS) package delivery notifications via SMS. The kit serves genuine USPS production HTML, CSS, fonts, and images verbatim, including live Google Analytics tags firing to USPS infrastructure. It captures victim card data i…
phishing kit
smishing
CVE-2024-6387
dns pivoting
2026-06-13
real-time credential capture
tencent cloud
ups impersonation
usps impersonation
websocket exfiltration
Published: June 13, 2026
Downloadable IOCs: 4
Click here to see more Attack Reports