2 PhaaS 2 Furious: The Evolution of Chinese-language Phishing Services

This report analyzes the rapidly growing Chinese-language phishing-as-a-service ecosystem, which uses sophisticated techniques distinct from Russian-based operations.

• •Real-time OTP interception via administrative panels enables MFA bypass to directly access victim accounts
• •Digital wallet tokenization converts stolen payment data into usable assets for contactless payments and ATM withdrawals
• •RCS and iMessage delivery bypasses traditional SMS security filters with encrypted, feature-rich messaging
• •AI-powered page generators create unique, localized phishing sites automatically rather than relying on static templates
• •YY Lai Yu example demonstrates 400+ localized templates targeting Japan's payment and e-commerce ecosystem