• Attackers send fraudulent text messages pretending to be from legitimate institutions.
• Messages contain links leading to phishing sites designed to steal personal data.
• Often disguised as package delivery notifications, bank alerts, or OTP requests.

5. Phishing Campaign Using India Post Lures (2024)

Steps of the Fraud:

1. Smishing Messages Sent:
   • iPhone users received iMessages claiming a package was awaiting them at an India Post warehouse.
2. Link to Phishing Site:
   • The message contained a link leading to a fraudulent website mimicking India Post’s official site.
3. Collection of Personal Information:
   • Victims were prompted to enter personal details, including name, address, and payment information, under the guise of paying a small fee for package redelivery.
4. Data Exploitation:
   • The collected information was likely used for unauthorized financial transactions or sold on the dark web.