logo

Operation Road Trap: Fake toll and parking texts are spreading worldwide

ID: d3cc233e-33d5-53e5-8ab4-76c2ba10e5cd

STIX ID: report--d3cc233e-33d5-53e5-8ab4-76c2ba10e5cd

Feed Name: Bitdefender Labs

Threat Score
75/100

Date Published: 2026-04-29

Date Updated: 2026-04-29

Author: Alecsandru Cătălin DAJ

...
...

Bitdefender Labs reports an ongoing global smishing campaign (Dec 2025–Apr 2026) delivering 79,000+ fraudulent texts across a dozen countries that impersonate DMVs, toll and parking authorities to trick drivers into paying fake fines or installing Android malware; researchers observed 31,900+ malicious URLs, multiple APK droppers/payloads with MD5 hashes, SMS-harvesting and WebView phishing, and C2 via Firebase and Telegram, and provide IoCs and mitigation guidance.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.