What is smishing?
Smishing is a phishing attack that uses text messages to trick people into sharing sensitive information or downloading malware.
Yanuki
ARTICLE DETAIL
FBI Warning: Chinese Text Attack Bombarding iPhone and Android Users | Discord Outage Disrupts Services; Accenture Acquires Ookla to Enhance Network Intelligence | TCS Launches Gemini Experience Center in US with Google Cloud | Tencent QClaw Enables Dual Access to WeChat and QQ | OpenClaw AI Agents Surge in Popularity Amidst Security Concerns | Apple at 50: The Untold Story of the iPhone | Privacy Concerns Rise Over Meta's AI Smart Glasses | Apple Unveils MacBook Air with M5 Chip and Renames CPU Cores | TikTok Outage: Impact, Causes, and How Brands Can Prepare | FBI Warning: Chinese Text Attack Bombarding iPhone and Android Users | Discord Outage Disrupts Services; Accenture Acquires Ookla to Enhance Network Intelligence | TCS Launches Gemini Experience Center in US with Google Cloud | Tencent QClaw Enables Dual Access to WeChat and QQ | OpenClaw AI Agents Surge in Popularity Amidst Security Concerns | Apple at 50: The Untold Story of the iPhone | Privacy Concerns Rise Over Meta's AI Smart Glasses | Apple Unveils MacBook Air with M5 Chip and Renames CPU Cores | TikTok Outage: Impact, Causes, and How Brands Can Prepare
Technology / Cybersecurity
FBI Warning: Chinese Text Attack Bombarding iPhone and Android Users
The FBI and other agencies are warning of a surge in 'smishing' attacks originating from China. These fraudulent text messages, often posing as toll road agencies like E-ZPass, are targeting iPhone and Android users across the US, aiming to...
Key Insights
- 'Smishing' attacks are rapidly increasing, with billions of spam texts sent in the US in February 2025 alone.
- These scams often impersonate toll road operators (like E-ZPass) or delivery services, using urgent language to trick recipients.
- Attackers are registering numerous domains mimicking state and city toll agencies.
- Many of these malicious domains use Chinese top-level domains (e.g., .TOP, .CYOU, .XIN).
- This isn't just about small toll amounts; the goal is to steal credit card numbers and even identities.
- **Why this matters:** This attack is infrastructural, impacting a vast number of users and potentially leading to significant financial and identity theft.
In-Depth Analysis
The attacks leverage an upgraded phishing kit sold in China, simplifying the process of sending texts and launching phishing sites. The texts often contain similar language, claiming an outstanding toll amount and providing a link to a fraudulent website. While the phone numbers used to send the messages are often random, the top-level domains are frequently Chinese. This has raised concerns about compliance issues with certain domain registries. Networks and phone OS makers are struggling to block these texts effectively due to the open nature of SMS and RCS protocols. The Australian Federal Police has also reported a similar attack spoofing the identity of a crypto exchange.
FAQ
What should I do if I receive one of these texts?
Delete the text immediately. Do not click on any links. You can report the scam.
What if I already clicked the link?
Check your accounts and change your key passwords, especially for communications and finance platforms. Contact your bank or credit card company to report any unauthorized charges.
Takeaways
- Be skeptical of unexpected texts, especially those demanding immediate payment or threatening penalties.
- Verify any toll-related notices by directly visiting the official website of the toll agency.
- Never click on links in unsolicited texts or emails.
- Consider signing up for an official electronic toll account to manage payments directly.
- Use credit cards instead of debit cards for better fraud protection.
Discussion
Have you received a suspicious text message like this? Let us know! Share this article with others who need to stay ahead of this trend!
Sources
Forbes: FBI Warning As iPhone, Android Users ‘Bombarded’ By Chinese Attack
Asbury Park Press: E ZPass outstanding toll text still being sent. How not to get scammed.
NorthJersey.com: FBI warning delete smishing texts: EZPass text scam, unpaid tolls
Disclaimer
This article was compiled by Yanuki using publicly available data and trending information. The content may summarize or reference third-party sources that have not been independently verified. While we aim to provide timely and accurate insights, the information presented may be incomplete or outdated.
All content is provided for general informational purposes only and does not constitute financial, legal, or professional advice. Yanuki makes no representations or warranties regarding the reliability or completeness of the information.
This article may include links to external sources for further context. These links are provided for convenience only and do not imply endorsement.
Always do your own research (DYOR) before making any decisions based on the information presented.