More than 200,000 websites are using investment scam templates built with the Chinese open source framework Uni-App, SecurityWeek reported on June 27, citing cybersecurity company Infoblox.
Uni-App is a cross-platform development tool. It can build mobile and desktop apps and mobile-optimised websites at the same time from a single codebase. It is widely used in China and is used in thousands of legitimate products. There is no sign its developer, DCloud, was involved in the scams.
RainbowEx, a fake cryptocurrency platform that became an international talking point after thousands of residents in a small Argentine town poured money into it, also used the framework. Scam domains began to appear in mid-2022. They surged from late 2024, after the RainbowEx scandal.
Infoblox said, "Over the past two years, scam sites using the DCloud framework have increased sharply, and operators continue to develop complex real-world tactics to deceive victims." It added, "It is time to comprehensively track the threat actors active in this ecosystem and identify commonalities across sites."
Chi-gyu Hwang
delight@d-today.co.kr