Loading malware…
Lucid is a phishing kit/service referenced as part of the industrialized brand-impersonation phishing ecosystem. The provided content identifies it as a paid phishing-tool provider alongside Lighthouse and Dracula, and notes that brand-impersonation phishing kits such as Lucid and Lighthouse have been used to stand up large volumes of fake domains targeting many brands across multiple countries. The content further states that the Chinese-speaking, financially motivated Smishing Triad has offered phishing-tool providers such as Lucid. High-confidence details in the source do not describe Lucid’s specific technical behavior, infection chain, or indicators of compromise beyond its role as a phishing/smishing-enabling toolkit or service used for large-scale brand impersonation.
1 distinct threat actor Mallory has associated with this family across public reporting. Open in Mallory to see the full evidence chain and overlapping campaigns.
"Smishing Triad has also offered other phishing-tool providers such as Dracula and Lucid."
2 distinct techniques documented for this family, organized by ATT&CK tactic.
Phishing appears in 84 per cent of social-engineering-related breaches in EMEA, against 69 per cent across the full dataset.
Another, Lucid, ran campaigns through iMessage and RCS against 169 targets across 88 countries.
1 indicator attributed across vendor reports, sandbox runs, and researcher write-ups. Values are masked here and available in full in Mallory.
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.