Attackers are impersonating a road toll payment processor across the U.S. in phishing attacks
Summary: Attackers are sending SMS phishing texts impersonating E-ZPass toll payment programs, with a fake New Jersey E-ZPass site convincing enough that a Cisco Talos researcher's wife nearly paid a claimed outstanding toll balance. E-ZPass has since alerted all states it operates in, and drivers from New York to Georgia and Pennsylvania have reported similar texts, following earlier FBI warnings in April about toll-service SMS phishing and alerts from Florida's SunPass and California's FasTrak.
Why it matters: The lure amounts are small, no more than $5, which keeps them below the threshold that would trigger alarm, and they arrive by SMS on mobile devices that may lack the security controls of a managed laptop.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026