Chinese Smishing Kit Powers Widespread Toll Fraud Campaign Targeting U.S. Users in 8 States
Since mid-October 2024, a "widespread and ongoing" SMS phishing effort has been targeting American toll road users in an attempt to steal their money, according to cybersecurity researchers.
Several financially motivated threat actors are employing the smishing kit created by "Wang Duo Yu," Cisco Talos researchers Azim Khodjibaev, Chetan Raghuprasad, and Joey Chen, who evaluated it with a moderate level of confidence.
According to the company, the phishing campaigns pose as American electronic toll collection systems such as E-ZPass, and they send Apple iMessages and SMS messages to people in Washington, Florida, Pennsylvania, Virginia, Texas, Ohio, Illinois, and Kansas about an unpaid toll. The recipients click on a phony link that is sent in the chat.
It's important to remember...