Over 236,000 Websites Exploit DCloud Uni-App for Large-Scale Cybercriminal Activities

Infoblox uncovered over 236,000 websites utilizing fraudulent investment scam templates created with DCloud Uni-App, a legitimate Chinese open-source cross-platform development framework. These templates are employed to operate fake cryptocurrency exchanges, multi-language 'pig-butchering' scams, WhatsApp phishing networks, counterfeit gambling platforms, and brand-impersonation schemes. The findings highlight the abuse of a trusted development tool to facilitate large-scale cybercriminal activities, though no specific dates or CVE IDs were mentioned. The impact includes widespread financial fraud, phishing, and wallet-draining attacks targeting users globally. No attribution to specific threat actors or geographic targeting was provided in the report.