Phishers Spoof USPS, 12 Other Natl’ Postal Services
Summary: KrebsOnSecurity documented an SMS phishing operation spoofing the USPS and postal services in at least a dozen other countries, using domains such as usps.informedtrck[.]com that mimic USPS branding and request address, personal, and financial data. Analysis of the phishing page's code showed it failed to load a Google Analytics code belonging to the real USPS, and URLscan.io tied the domain fly.linkcdn[.]to to a long list of USPS-themed phishing domains, while a search for Alibaba-registered domains claiming a "Georgia, AL" location surfaced nearly 300 recent postal phishing domains ending in ".top."
Key Takeaway: Data submitted to one of these sites was sent via an automated Telegram bot to the user @chenlun, who sells customized phishing page source code, and DomainTools separately attributed a sprawling USPS SMS phishing campaign to criminals based in Iran.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026