MEDIUMPhishing
Global

236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers

·Source: The Hacker News

Updated:

Executive Summary

New findings unearthed by Infoblox show that more than 236,000 websites are using investment scam templates built using a legitimate Chinese open-source, cross-platform application development framework called DCloud Uni-App. The templates power bogus cryptocurrency exchanges, multi-language pig-butchering operations, WhatsApp phishing networks, fake gambling platforms, brand-impersonation

Analysis

New findings unearthed by Infoblox show that more than 236,000 websites are using investment scam templates built using a legitimate Chinese open-source, cross-platform application development framework called DCloud Uni-App. The templates power bogus cryptocurrency exchanges, multi-language pig-butchering operations, WhatsApp phishing networks, fake gambling platforms, brand-impersonation
Source Attribution

Originally published by The Hacker News on Jun 29, 2026.

Related Threats

CRITICALPhishing

ST Engineering iDirect iQ-Series Terminals

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-183-01.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to device information or cause a denial-of-service condition.</strong></p> <p>The following versions of ST Engineering iDirect iQ-Ser

CVE-2026-38059CVE-2026-38057
CISA Advisories
CRITICALPhishing

CubeSpace CW0057 Reaction Wheel

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-183-02.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of this vulnerability could allow an attacker to upload arbitrary malicious firmware to the device.</strong></p> <p>The following versions of CubeSpace CW0057 Reaction Wheel are affected:</p> <ul> <li>CW0057 Re

CVE-2026-13743
CISA Advisories
MEDIUMPhishing

Turning Indicators into Intelligence in OpenCTI with Criminal IP

Threat intelligence is only as useful as the context behind it. Criminal IP explains how its integration enriches threat indicators in OpenCTI with risk scoring, infrastructure intelligence, and phishing analysis. [...]

BleepingComputer