threat-intel
236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers
High
Summary
A report by Infoblox has identified over 236,000 websites utilizing the DCloud Uni-App framework, many of which are being exploited for cryptocurrency scams, phishing attacks, and wallet draining operations. These sites, spanning multiple continents and languages, impersonate legitimate brands and financial platforms, and are linked to fraudulent schemes like the RainbowEx exchange. The analysis suggests coordinated activity by unknown threat actors, potentially selling the templates and adapting them to evade detection.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data