USPS Text Scammers Duped His Wife, So He Hacked Their Operation
📦 Security researcher Grant Smith began investigating a mass-smishing campaign early this year after his wife inadvertently entered her credit card details on a fraudulent USPS package delivery scam website. Smith, the founder of Phantom Security, discovered 438,669 unique credit card entries on 1,133 domains operated by a Chinese-language group, with victims across the United States—California leading with 141,000 entries. In total, over 1.2 million pieces of information were collected, including over 50,000 email addresses. Smith reported his findings at the Defcon security conference and handed evidence to USPS investigators and a US bank. The scam, known as the Smishing Triad, sends 50,000 to 100,000 messages daily and sells their smishing kit on Telegram for a $200-per-month subscription.
Share