Threat actors are abusing the Uni-App development framework to build investment scam templates powering over 200,000 sites.