Chinese Innovations Spawn Wave of Toll Phishing Via SMS

Researchers and U.S. state transport agencies warn of a surge in SMS phishing (smishing) impersonating toll-road operators (E-ZPass/EZDriveMA, SunPass, NTTA, etc.) tied to new modules in China-based commercial phishing kits (Lighthouse, Chenlun). The kits produce mobile-only phishing pages and leverage iMessage/RCS for delivery to steal payment card data and OTPs; incidents have been reported across multiple states and victims are urged to ignore messages and report them to IC3.