Chinese Innovations Spawn Wave of Toll Phishing Via SMS
Summary: A surge in SMS toll phishing across the United States coincided with new modules released in January 2025 by Lighthouse, a China-based phishing kit, that mimic state toll operator sites such as Massachusetts' EZDriveMA and the North Texas Toll Authority. SecAlliance's Ford Merrill said the kits, sold by multiple China-based criminals to hundreds or thousands of customers each, now deliver lures through iMessage and RCS because telecom operators cannot filter them.
What's compelling: The phishing pages load only on mobile devices and are run dynamically in real time, and the end goal is harvesting enough card data to load stolen cards into mobile wallets for purchases or laundering through shell companies.
Read the original at Krebs on Security ↗
- Topics
- Phishing & Social Engineering
- Related
- US disrupts North Korean campaign behind $400 million crypto theft Cyber Risks · Nov 14, 2026North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure Cyber Risks · Nov 13, 2026FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Cyber Risks · Nov 13, 2026