This article discusses a new wave of SMS phishing scams targeting toll fee payments in the US. Scammers send urgent text messages that link to fake toll agency websites, aiming to steal personal and payment information. State departments are alerting the public about these phishing attempts and emphasizing vigilance and verification. Affected: Toll authority websites, US mobile users, various state departments.
Keypoints :
- A new wave of toll fee scams using SMS phishing is affecting users in the US.
- Scammers create a sense of urgency in messages about toll payments.
- Phishing sites are designed to steal personal information and payment details.
- State departments like WisDOT and Arizona DOT have issued warnings about these scams.
- Users report receiving multiple scam messages daily.
- Scammers often use fabricated links that mimic legitimate domains.
- Helpful tips for avoiding toll fee scams include checking the sender’s number and confirming payments with official toll agencies.
- The FBI encourages reporting suspicious messages to their Internet Crime Complaint Center.
MITRE Techniques :
- Phishing (T1566): Scammers send fraudulent SMS messages to trick victims into clicking malicious links.
- Credential Dumping (T1003): The phishing sites aim to harvest personal information and payment details.
Indicator of Compromise :
- [Domain] com-roadioe[.]cc
- [Domain] uoshxkdhkz[.]top
- [Domain] com-zgoupbb[.]top
- [Domain] forfeitzm[.]top
- [Domain] sunpass-verification[.]top
Full Story: https://www.malwarebytes.com/blog/news/2025/04/toll-fee-scams-are-back-and-heading-your-way