Security experts warn of Darcula, a phishing-as-a-service platform targeting iPhone and Android users worldwide.

Darcula uses fake domains to launch large-scale smishing attacks via iMessage and RCS, imitating postal services and other entities.

The service has been active for over a year, with a focus on victims in the UK and US, showing its extensive reach.

Phishing sites linked to Darcula are high quality and have been involved in major phishing incidents.

There's a suspected alignment of Darcula with Chinese-speaking cybercriminal groups.

Cybersecurity awareness is crucial; users should scrutinize unsolicited messages and verify authenticity before engagement.

Recommendations include heightened vigilance against parcel delivery scam messages and using official websites for verifications instead of provided links.