Chinese Cybercriminals Increasingly Use Real-Time Credential Interception Instead of Conventional Phishing

Google researchers reported that the Chinese phishing-as-a-service (PhaaS) ecosystem has grown rapidly in recent months and become more sophisticated. Operators have shifted from static password harvesting to the real-time interception of credentials and one-time passcodes.