Lucid Nightmares: How Phishing-as-a-Service is Hooking Victims Worldwide!
The XinXin group’s phishing-as-a-service platform, Lucid, is casting a wide net with iMessage and RCS, targeting 169 entities across 88 countries. With over 1,000 phishing domains and spam tools, Lucid makes cybercrime a subscription service. Remember, if a message seems fishy, don’t take the bait—log in directly to the service instead.

Hot Take:
Who needs a university degree when you can get a subscription to Lucid’s Phishing-as-a-Service? With phishing domains, auto-generated sites, and spamming tools, it’s like a cybercriminal’s version of a streaming service. Just sit back, relax, and let Lucid do the dirty work. If only they offered a popcorn delivery service too!
Key Points:
- Lucid, a Phishing-as-a-Service platform, targets 169 entities in 88 countries using iMessage and RCS.
- Operated by the XinXin group, Lucid offers access to over 1,000 phishing domains and professional spamming tools.
- Lucid’s phishing messages evade spam filters by using encrypted iMessage and RCS services.
- Phishing campaigns are conducted from moving cars to avoid detection by authorities.
- Lucid’s platform validates stolen credit cards and facilitates the sale or direct use of them for fraud.
Already a member? Log in here