236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers
More on Phishing
Other advisories
- Not ratedosv:CLEANSTART-2024-BJ94999It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user
- Not ratedosv:CLEANSTART-2024-UT42831One phishing tactic on the web is to provide a link with HTTP Auth
- Not ratedosv:CLEANSTART-2024-VX80275By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other a...
- Not ratedosv:CLEANSTART-2024-EG22202It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user
- Not ratedosv:CLEANSTART-2024-XZ16230One phishing tactic on the web is to provide a link with HTTP Auth
- Not ratedosv:CLEANSTART-2024-FS95254By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other a...
- Not ratedosv:CVE-2026-114089Trigger.dev before 4.5.2 CLI Auth-Code Phishing Leading to PAT Takeover
- Not ratedosv:CVE-2026-55840Scoold: Open Redirect in getBackToUrl() allows phishing via domain-prefix startsWith bypass
Other news entries
- Email threat landscape: Q3 2026 trends and insightsNewsMicrosoft Threat Intelligence
- ChatGPT Lockdown Mode Bypass: Phishing, Malware Delivery, and Silent Data ExfiltrationNewsCheck Point Research
- Bank Phishing Sites Show Fake ‘Suspended’ Pages to Evade TakedownsNewsSecurityWeek
- Google Calendar phishing campaign hijacks sessions, bypasses MFANewsBleepingComputer
- Phishing-Resistant Isn't Enough; Yubico Takes Aim at Identity-Verification GapNewsDark Reading
- North Korean fake job interview led to $6.3B Binance heistNewsThe Register — Security
- ⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and MoreNewsThe Hacker News
- Why do we keep testing employees for yesterday’s phishing attacksNewsCSO Online
Source: https://thehackernews.com/2026/06/236000-dcloud-uni-app-sites-used-in.html
ID