> TritonInfoSec News
Home / Jun 30, 2026 / Story
0
#9 The Hacker News general June 29, 2026 at 11:57 UTC

236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers

By [email protected] (The Hacker News)

AI Summary

Infoblox researchers identified over 236,000 websites built using the legitimate Chinese open-source framework DCloud Uni-App as infrastructure for investment scams, pig-butchering operations, WhatsApp phishing networks, fake gambling platforms, and crypto wallet drainers. The abuse of a widely used cross-platform development framework as a scam template engine enables rapid, multilingual fraud deployment at scale. Threat hunters should add DCloud Uni-App-based indicators to fraud detection rulesets given the volume of malicious deployments.

Read full article → https://thehackernews.com/2026/06/236000-dcloud-un…

Relevance score: 78.0/100

# More from June 30

  1. 1
    U.S. offers $10 million for hackers targeting WhatsApp, Signal users BleepingComputer
  2. 2
    Critical SimpleHelp flaw exploited to deploy new stealer malware BleepingComputer
  3. 3
    Hackers now exploit critical Oracle E-Business flaw in attacks BleepingComputer
  4. 4
    Nissan discloses employee data breach linked to Oracle zero-day attacks BleepingComputer
  5. 5
    Microsoft Removes 119 Edge Extensions That Hid Malware in Images and Fonts The Hacker News
  6. 6
    Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw The Hacker News
  7. 7
    Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks The Hacker News
  8. 8
    Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse The Hacker News
  9. 10
    Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer The Hacker News