Since January 2025, Group-IB has tracked over 2,500 #phishing domains tied to a single #PhaaS ecosystem known as the "Phoenix System" (不死鳥系統), which has targeted more than 70 organizations across financial services, telecom, and logistics.
Group-IB Threat Intelligence feed featuring APT research, ransomware analysis and cybercrime investigations.
Since January 2025, Group-IB has tracked over 2,500 #phishing domains tied to a single #PhaaS ecosystem known as the "Phoenix System" (不死鳥系統), which has targeted more than 70 organizations across financial services, telecom, and logistics. Despite using different lures, reward points versus failed parcel delivery, both campaigns share identical backend infrastructure, IP filtering, and geofencing controls, confirming they are not independent operations but branches of a centralized #smishing framework.
