Chinese Cyberattack Targets iPhone and Android Users: Heed the FBI's Urgent Alert
Feeling Pressured by Suspicious Texts? Here's the Lowdown on the Widespread Smishing Scam
The Skinny:Smishing, a nasty cousin of phishing, is now sweeping across America, preying on iPhone and Android users from coast to coast. This time, cybercriminals disguise themselves as toll service operators or delivery agencies, hoping to swipe your hard-earned cash or even your identity - yikes! And guess what? Our friends from China are back at it again[1][2][3].
Call to Action:The FBI says, "Keep your thumbs still!" Stop answering those shifty texts claiming you owe toll fees! There's a horde of them out there, and if the scale doesn't alarm you, then the potential cost certainly will[1]. But it's not just toll fraud - it's a full-on cyber attack. Security company Trend Micro described it as a spiraling mess that keeps growing[1].
Detecting the Scam Artists:So, how can you tell if a text's a phony? Watch out for spammy messages that demand immediate payment and contain almost identical language, with 'outstanding toll amounts' looking eerily similar. But the giveaway might be the links, which differ from state to state because these savvy scammers register tens of thousands of domains to mimic legitimate toll agencies[1].
Play Detective:To catch these crafty criminals, keep an eye out for less popular top-level domains such as .TOP, .CYOU, and .XIN. The .TOP domain in particular has a shady past, with ICANN breach letters listing its failure to comply with abuse reporting and mitigation requirements[1].

Turn the Tide:Now, it's up to us to fight back! By reporting phony texts to the FBI's IC3.gov, apwg.org/sms, or your service provider (by sending them to 7726, aka SPAM), we can help improve alarm systems that protect billions of devices worldwide[1].
Stay Protected:Don't let these sneaky scammers get the best of you! Verify any requests by checking official websites or calling customer service, and be wary of suspicious links. Use spam filters, install anti-phishing software, and enable two-factor authentication to boost your security game[5].
By following these tips, you'll be able to dodge these smishing attacks and enjoy some peace of mind while cruising through the digital highway. Stay vigilant, friends!
[1] https://www.forbes.com/sites/thomasbrewster/2023/02/23/china-mass-smishing-toll-bill-scam-fbi-ftc-warns-cybercrime/[2] https://www.cnbc.com/2023/02/23/new-fbi-warning-on-chinese-smishing-scams-toll-bills-and-delivery-notifications.html[3] https://www.zdnet.com/article/major-us-cities-hit-by-phishing-scam-claiming-to-be-from-toll-road-operators/[4] https://apwg.org/SMS/[5] https://www.ftc.gov/faq/consumer-protection/glossary/two-factor-authentication
- The toll scam currently spreading across America is a form of smishing, a type of cyber attack that resembles phishing and has been linked to cybercriminals based in China.
- This scam often disguises itself as a toll service operator or delivery agency, pushing for immediate payment with potentially astronomical costs if not paid.
- To avoid falling victim to smishing scams, users should report suspicious texts to the FBI's IC3.gov, apwg.org/sms, or their service provider (by sending them to 7726, aka SPAM), and always verify requests by checking official websites or calling customer service.