SecAlliance and Silent Push confirmed that the suspected Chinese operators of the phishing kit appear to have been affected.

The China-linked operation has grown from a phishing kit marketplace into an active and growing community supporting a decentralized large-scale phishing ecosystem.