{
  "Event": {
    "analysis": "1",
    "date": "2025-10-23",
    "extends_uuid": "",
    "info": "[Threat Intel] The Smishing Deluge: China-Based Campaign Flooding Global Text Messages",
    "protected": false,
    "publish_timestamp": "1780041270",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1772902062",
    "uuid": "2cb19adb-c8d9-4146-bc3e-fcf2490199fb",
    "Orgc": {
      "name": "Rectifyq",
      "uuid": "cd9bd516-61fa-476b-980f-2f8de03992d4"
    },
    "Tag": [
      {
        "colour": "#0afe32",
        "local": false,
        "name": "misp-galaxy:producer=\"Palo Alto\"",
        "relationship_type": ""
      },
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#2afb09",
        "local": false,
        "name": "misp-galaxy:target-information=\"Argentina\"",
        "relationship_type": ""
      },
      {
        "colour": "#b990dd",
        "local": false,
        "name": "misp-galaxy:target-information=\"Australia\"",
        "relationship_type": ""
      },
      {
        "colour": "#1faf16",
        "local": false,
        "name": "misp-galaxy:target-information=\"Canada\"",
        "relationship_type": ""
      },
      {
        "colour": "#5ed128",
        "local": false,
        "name": "misp-galaxy:target-information=\"Germany\"",
        "relationship_type": ""
      },
      {
        "colour": "#4e41fc",
        "local": false,
        "name": "misp-galaxy:target-information=\"Ireland\"",
        "relationship_type": ""
      },
      {
        "colour": "#26fab6",
        "local": false,
        "name": "misp-galaxy:target-information=\"Israel\"",
        "relationship_type": ""
      },
      {
        "colour": "#72ab92",
        "local": false,
        "name": "misp-galaxy:target-information=\"Lithuania\"",
        "relationship_type": ""
      },
      {
        "colour": "#915448",
        "local": false,
        "name": "misp-galaxy:target-information=\"Malaysia\"",
        "relationship_type": ""
      },
      {
        "colour": "#809a25",
        "local": false,
        "name": "misp-galaxy:target-information=\"Poland\"",
        "relationship_type": ""
      },
      {
        "colour": "#15cd0b",
        "local": false,
        "name": "misp-galaxy:target-information=\"Russia\"",
        "relationship_type": ""
      },
      {
        "colour": "#a24b57",
        "local": false,
        "name": "misp-galaxy:target-information=\"United Arab Emirates\"",
        "relationship_type": ""
      },
      {
        "colour": "#ce59f1",
        "local": false,
        "name": "misp-galaxy:target-information=\"United Kingdom\"",
        "relationship_type": ""
      },
      {
        "colour": "#b8ab01",
        "local": false,
        "name": "misp-galaxy:target-information=\"United States\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:sector=\"Bank\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:sector=\"IT\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:sector=\"Police - Law enforcement\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:sector=\"eCommerce\"",
        "relationship_type": ""
      },
      {
        "colour": "#49a260",
        "local": false,
        "name": "rectifyq:category=\"threat\"",
        "relationship_type": ""
      },
      {
        "colour": "#130049",
        "local": false,
        "name": "rectifyq:sub-category=\"campaign-analysis\"",
        "relationship_type": ""
      },
      {
        "colour": "#ffd12e",
        "local": false,
        "name": "rectifyq:target=\"broad-based\"",
        "relationship_type": ""
      },
      {
        "colour": "#dd2e44",
        "local": false,
        "name": "rectifyq:MY-relevancy=\"relevant\"",
        "relationship_type": ""
      },
      {
        "colour": "#b94b1d",
        "local": false,
        "name": "rectifyq:mitre-att&ck=\"none-from-src\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Phishing - T1660\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:financial-fraud=\"Smishing\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:financial-fraud=\"Fake Website\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:financial-fraud=\"Compromised Account Credentials\"",
        "relationship_type": ""
      },
      {
        "colour": "#626567",
        "local": false,
        "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
        "relationship_type": ""
      },
      {
        "colour": "#626567",
        "local": false,
        "name": "rectifyq:no-samples-in=\"Tria.ge\"",
        "relationship_type": ""
      },
      {
        "colour": "#3800d9",
        "local": false,
        "name": "rectifyq:action-taken=\"VT-comment\"",
        "relationship_type": ""
      },
      {
        "colour": "#3d00e9",
        "local": false,
        "name": "rectifyq:action-taken=\"telegram\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1761288432",
        "to_ids": false,
        "type": "link",
        "uuid": "c9969fdf-819d-42d9-90cf-92733f17d620",
        "value": "https://unit42.paloaltonetworks.com/global-smishing-campaign/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762212588",
        "to_ids": true,
        "type": "hostname",
        "uuid": "ea71e73f-280c-4d4c-99e2-bc27db526455",
        "value": "icloud.com-remove-device.top",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762212609",
        "to_ids": true,
        "type": "hostname",
        "uuid": "08531d8c-da4a-43a8-92e5-1b47bd9030ff",
        "value": "flde-lity.com-lg.icu",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762212630",
        "to_ids": true,
        "type": "hostname",
        "uuid": "7e555752-12ea-4c0a-924d-596741af8a33",
        "value": "michigan.gov-etczhh.cc",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762212651",
        "to_ids": true,
        "type": "hostname",
        "uuid": "c3b140b7-99c0-4004-acf1-a71be07fe43a",
        "value": "utah.gov-etcfr.win",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762212672",
        "to_ids": true,
        "type": "hostname",
        "uuid": "f892d813-85a6-4fbe-8212-5d057d62a0ac",
        "value": "irs.gov-tax.cfd",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762212693",
        "to_ids": true,
        "type": "hostname",
        "uuid": "4e78824d-3775-4509-bb38-0e44d3b6c9b8",
        "value": "irs.org.gov-tax.icu",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762212714",
        "to_ids": true,
        "type": "hostname",
        "uuid": "529dfef7-1d2e-41dd-9886-dd2f7e318dcb",
        "value": "anpost.com-pay.online",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762212735",
        "to_ids": true,
        "type": "hostname",
        "uuid": "45bc5a58-f8a2-4420-a90f-9b5e56011983",
        "value": "kveesh6.il-363.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762212756",
        "to_ids": true,
        "type": "hostname",
        "uuid": "6d664992-2fee-4de5-bebd-206b6704856a",
        "value": "dhl.de-yiore.store",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762212777",
        "to_ids": true,
        "type": "hostname",
        "uuid": "502a3f3c-483b-4829-b19b-09472b1f3814",
        "value": "usps.com-posewxts.top",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762212799",
        "to_ids": true,
        "type": "hostname",
        "uuid": "f9286a2a-8042-4c92-80b1-e318c0c4b264",
        "value": "e-zpass.com-etcha.win",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762212821",
        "to_ids": true,
        "type": "hostname",
        "uuid": "cbf8111d-3c52-410f-a74f-bfb585572ed7",
        "value": "usps.com-isjjz.top",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762212842",
        "to_ids": true,
        "type": "hostname",
        "uuid": "f2634f2d-9fe5-41c5-a1c2-c8a91ab60565",
        "value": "flde-lity.com-jw.icu",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762212863",
        "to_ids": true,
        "type": "hostname",
        "uuid": "596598f6-e433-4ac1-b648-640103ad638f",
        "value": "e-zpass.com-tollbiler.icu",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762212884",
        "to_ids": true,
        "type": "hostname",
        "uuid": "244a7561-a200-402f-a574-a431ed877050",
        "value": "e-zpassny.com-pvbfd.win",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762212905",
        "to_ids": true,
        "type": "hostname",
        "uuid": "191d0aeb-5f00-44e2-aac1-3b40bfc704cb",
        "value": "e-zpass.com-statementzz.world",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762212926",
        "to_ids": true,
        "type": "hostname",
        "uuid": "4426b6da-51e0-47a0-b34a-c4d1d44ee629",
        "value": "e-zpass.com-emea.top",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762212947",
        "to_ids": true,
        "type": "hostname",
        "uuid": "2ae201d1-4057-4041-93db-9d216e900fd3",
        "value": "pikepass.com-chargedae.world",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762212968",
        "to_ids": true,
        "type": "hostname",
        "uuid": "48a588ef-9139-45c2-a52a-9f0243c024c3",
        "value": "e-zpass.com-etcoz.win",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762212989",
        "to_ids": true,
        "type": "hostname",
        "uuid": "d2bfca5f-b337-4566-b7f6-f4a865301e0d",
        "value": "e-zpassny.com-kien.top",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762213010",
        "to_ids": true,
        "type": "hostname",
        "uuid": "16413a62-e310-45b3-8730-e47379ea8487",
        "value": "e-zpassny.com-xxai.vip",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762213032",
        "to_ids": true,
        "type": "hostname",
        "uuid": "e835f4db-7ac2-4593-aabc-ba006731aed6",
        "value": "sunpass.com-hbg.vip",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762213053",
        "to_ids": true,
        "type": "hostname",
        "uuid": "0be2301c-fb67-4afc-98f3-90021d28ad03",
        "value": "usps.com-hzasr.bid",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762213074",
        "to_ids": true,
        "type": "hostname",
        "uuid": "74ed6c83-fd45-4f8a-86db-208773e32427",
        "value": "e-zpassny.gov-tosz.live",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762213095",
        "to_ids": true,
        "type": "hostname",
        "uuid": "e26087dc-03c4-48e6-8552-bcbe9035f7d4",
        "value": "michigan.gov-imky.win",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762213116",
        "to_ids": true,
        "type": "hostname",
        "uuid": "cf6278a5-db73-4efe-b9cc-05b910bc5118",
        "value": "e-zpass.org-yga.xin",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762213138",
        "to_ids": true,
        "type": "hostname",
        "uuid": "277b8299-6f12-4962-a346-a713dc47dc5a",
        "value": "e-zpass.org-qac.xin",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762213159",
        "to_ids": true,
        "type": "hostname",
        "uuid": "20c8aa21-88dd-4ad2-b941-0aa0f32ff61c",
        "value": "ezpass.org-pvwh.xin",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762213180",
        "to_ids": true,
        "type": "hostname",
        "uuid": "54404fa6-8363-4539-97c2-f6dd621756b0",
        "value": "ezpassnj.gov-mhmt.xin",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762213202",
        "to_ids": true,
        "type": "hostname",
        "uuid": "b388b004-c09f-4715-b933-abf0ca2dc294",
        "value": "e-zpassny.gov-hzwy.live",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762213223",
        "to_ids": true,
        "type": "hostname",
        "uuid": "463c4865-310a-4f11-820f-6b9051f5d10f",
        "value": "irs.gov-addpayment.info",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762213244",
        "to_ids": true,
        "type": "hostname",
        "uuid": "e01433c0-6e0e-419f-85d5-a4a95ce9c3af",
        "value": "irs.gov-mo.net",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762213265",
        "to_ids": true,
        "type": "hostname",
        "uuid": "9674fb51-0fb6-44e1-a851-eeee86c0c79f",
        "value": "israeipost.co-ykk.vip",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762213286",
        "to_ids": true,
        "type": "hostname",
        "uuid": "36e87b47-e93b-454a-b148-6cbd53a94f9e",
        "value": "canpost.id-89b98.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1762213308",
        "to_ids": true,
        "type": "hostname",
        "uuid": "149895b4-d659-48d8-8a0b-f47a2ea56bd4",
        "value": "anpost.id-39732.info",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}