236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers

Researchers at Infoblox have discovered that over 236,000 websites are utilizing templates created with the DCloud Uni-App framework for malicious activities. These templates are being used to power various types of scams, including fake cryptocurrency exchanges and phishing networks. The scams also involve multi-language pig-butchering operations, fake gambling platforms, and brand impersonation. The DCloud Uni-App framework is a legitimate Chinese open-source application development tool. The findings indicate a widespread use of this framework for illicit purposes, including crypto scams and wallet drainers.