Phishing Campaign Linked to China Targets US Postal Service, Says Cybersecurity Analyst

In a startling revelation, cybersecurity analysts from Uptycs have uncovered a sophisticated phishing campaign linked to China that impersonates the United States Postal Service (USPS). This extensive campaign involves the use of unsolicited text messages and malicious web links to trick recipients into divulging personal information. With over a thousand active phishing websites masquerading as USPS portals, this campaign poses a significant threat to unsuspecting individuals.

Attack techniques

The perpetrators behind this phishing campaign employed a technique commonly referred to as “smishing,” which involves SMS phishing through cellphone networks. Victims were targeted with unsolicited text messages that contained malicious web links. By clicking on these links, individuals unknowingly compromised their own security, falling right into the hands of the attackers.

The attackers’ modus operandi was to lure victims into entering personal details such as their name, address, and credit card information. To accomplish this, they designed a deceptive “update form” that purportedly came from the legitimate USPS. However, these fraudulent forms were meticulously crafted to appear genuine, catching many victims off guard.

Detection of live phishing websites

Uptycs conducted an extensive investigation and discovered more than a thousand “live phishing websites” that were masquerading as legitimate USPS portals. These websites were specifically designed to deceive unsuspecting users and obtain their sensitive information. Fortunately, Uptycs managed to block all 1,050+ indicators it identified during this investigation.

Attribution of the campaign

Based on their findings, Uptycs analysts have concluded that there is a high possibility that Chinese threat actors are organizing this phishing campaign. Although they did not provide elaborate reasoning for this attribution, Uptycs noted that servers used in the campaign were located not only in China but also in the US, Canada, Singapore, and Russia. This highlights the porous nature of borders in the digital ecosystem, making it challenging to accurately attribute cyberattacks to any specific nation or actor.

Implications

The discovery of this phishing campaign underscores the ongoing tech war between the US and China, marked by mutual suspicion and strategic competition. The involvement of Chinese threat actors in targeting a vital service like the USPS adds another dimension to this cyberattack. Moreover, the diverse geographical distribution of servers used in this campaign illustrates the global reach and complexity of modern cyber threats.

Attribution challenges and digital borders

Accurately attributing cyberattacks to specific actors or nations is a daunting task. The nature of the digital landscape allows attackers to exploit the infrastructure of various countries, making it difficult to pinpoint responsibility with certainty. As Uptycs’ investigation demonstrates, servers used in the phishing campaign span multiple countries, further blurring the lines of attribution.

Security recommendations

Given the sophistication of this phishing campaign, Uptycs advises the public to exercise caution when receiving unsolicited text messages. It is crucial to avoid clicking on suspicious links, phone numbers, or attachments contained within such messages. Instead, individuals should directly contact entities through their official websites or published contact details to verify the legitimacy of any requests.

The rise of phishing campaigns that impersonate well-known institutions like the USPS illustrates the growing threat posed by cybercriminals. The recent discovery of a phishing campaign linked to China targeting the USPS highlights the need for heightened vigilance and awareness among individuals using digital services. As governments and cybersecurity organizations continue to work together to combat cyber threats, it is essential for individuals to remain proactive in protecting their personal information and staying informed about the latest security practices.

Explore more

Leadership: The Key to Scaling Skilled Trades Businesses

Imagine a small plumbing firm with a backlog of projects, a team stretched thin, and an owner-operator buried under administrative tasks while still working on-site, struggling to keep up with demand. This scenario is all too common in the skilled trades industry, where technical expertise often overshadows the need for strategic oversight, leading to stagnation. The reality is stark: without

How Can Businesses Support Domestic Violence Victims?

Introduction Imagine a workplace where employees silently grapple with the trauma of domestic violence, fearing judgment or job loss if their struggles become known, while the company suffers from decreased productivity and rising costs due to this hidden crisis. This pervasive issue affects millions of individuals across the United States, with profound implications not only for personal lives but also

Why Do Talent Management Strategies Fail and How to Fix Them?

What happens when the systems meant to reward talent and dedication instead deepen unfairness in the workplace? Across industries, countless organizations invest heavily in talent management strategies, aiming to build a merit-based culture where the best rise to the top. Yet, far too often, these efforts falter, leaving employees disillusioned and companies grappling with inequity and inefficiency. This pervasive issue

Mastering Digital Marketing for NGOs in 2025: A Guide

In a world where over 5 billion people are online daily, NGOs face an unprecedented opportunity to amplify their missions through digital channels, yet the challenge of cutting through the noise has never been greater. Imagine an organization like Dianova International, working across 17 countries on critical issues like health, education, and gender equality, struggling to reach the right audience

How Can Leaders Prepare for the Cognitive Revolution?

Embracing the Intelligence Age: Why Leaders Must Act Now Imagine a world where machines not only perform tasks but also think, learn, and adapt alongside human workers, transforming every industry from manufacturing to healthcare in ways we are only beginning to comprehend. This is not a distant dream but the reality of the cognitive industrial revolution, often referred to as