I didn't download and install the phishing net myself, and the SMS prompted me to verify the identity of the phishing net because my personal information was leaked. Mobile phones don't receive messages that need to be verified for no reason. Maybe the mobile phone was leaked for some reason, and then someone registered the website with your mobile phone number, so they sent it to your mobile phone and asked for identity authentication.
Methods to prevent information leakage: handle personal sensitive information in physical or logical areas with high security level; Sensitive personal information needs to be encrypted and saved; Only personal information is transmitted to legal recipients, etc.