Chinese Framework Powers 200,000 Scam Sites

Cybersecurity researchers at Infoblox have discovered over 200,000 scam websites built using templates powered by Uni-App, a legitimate Chinese open-source development framework. The fraudulent sites range from fake cryptocurrency exchanges to phishing operations and so-called pig-butchering scams, including the notorious RainbowEx platform that defrauded thousands in Argentina. While the framework's maker DCloud isn't involved in the fraud, threat actors have been selling scam templates since 2022, with activity surging to 15,000 new sites monthly after the RainbowEx scandal gained media attention in late 2024.