PhaaS Service Darcula Targets iPhone And Android Users In A Credentials-Stealing Campaign

Introducing 'Darcula', a novel phishing-as-a-service (PhaaS) platform utilizing a network of 20,000 domains to mimic reputable brands and pilfer user credentials across Android and iPhone devices spanning over 100 nations. 'Darcula' has been deployed across diverse sectors including postal, financial, governmental, taxation bodies, telecommunications, airlines, and utilities, presenting cybercriminals with a selection of over 200 templates for exploitation. Setting itself apart, the service leverages the Rich Communication Services (RCS) protocol for Google Messages and iMessage, diverging from conventional SMS methods to approach targets with phishing messages. Read more...