← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Operation Road Trap: Fake toll and parking texts are spreading worldwide
A recent smishing campaign, dubbed Operation Road Trap, targets drivers across twelve countries, employing fraudulent messages designed to pressure victims into submitting personal information or financial details. The scammers impersonate transport authorities, toll operators, and parking services, often claiming that the recipient has unpaid fines or tickets. The messages create a sense of urgency by threatening exacerbating consequences, such as fees or legal actions, and include links to websites that mimic legitimate payment portals.
MITRE ATT&CK & Malware Families
Indicators of Compromise (37)
| TYPE | INDICATOR | DESCRIPTION | CREATED | |
|---|---|---|---|---|
| FileHash-MD5 | 014cda697a053d39f0504f626cb4aa4b | — | 2026-04-30 | |
| FileHash-MD5 | 116b2280004a9d313a30acb767b1a85e | — | 2026-04-30 | |
| FileHash-MD5 | 25604ed81bc7b603897e390c3c7920e0 | — | 2026-04-30 | |
| FileHash-MD5 | 3711004997a5efc09e3eefab8b2fa91f | — | 2026-04-30 | |
| FileHash-MD5 | 3c45b541cb7f29bb60a83564850e775a | — | 2026-04-30 | |
| FileHash-MD5 | 71bd06e73ad26ccf19cbc59c02630f14 | — | 2026-04-30 | |
| FileHash-MD5 | a2b03b138ec0a6263b73e17372063345 | — | 2026-04-30 | |
| FileHash-MD5 | bcc411c84a3ba169e1f989929115834f | — | 2026-04-30 | |
| FileHash-MD5 | ce83808d52dcfff0c6f96ee5874fd841 | — | 2026-04-30 | |
| FileHash-MD5 | fdd449fc92ea92b8a5b5478b56c56ecd | — | 2026-04-30 | |
| FileHash-SHA1 | 01e100d22a051ebb2627f25d362e86df4224fb62 | SHA1 of 3711004997a5efc09e3eefab8b2fa91f | 2026-04-30 | |
| FileHash-SHA1 | 226bf32d922ceaf04f65a979a41d1819d41e2eae | SHA1 of a2b03b138ec0a6263b73e17372063345 | 2026-04-30 | |
| FileHash-SHA1 | 3100dc956e5e50e45775b5f8a3e07659e0bed6ee | SHA1 of 3c45b541cb7f29bb60a83564850e775a | 2026-04-30 | |
| FileHash-SHA1 | deac48fd200cac93eb85fffbbcf8fb436c9fa178 | SHA1 of 25604ed81bc7b603897e390c3c7920e0 | 2026-04-30 | |
| FileHash-SHA256 | 85a17820c84ad15209b506922714cc9f3cee8782a1cf6b293933a52d044983af | SHA256 of 3c45b541cb7f29bb60a83564850e775a | 2026-04-30 | |
| FileHash-SHA256 | 86f43f36d08f33136408b6f9a4139be43864cc166eaedb436f40ffd7c8820819 | SHA256 of a2b03b138ec0a6263b73e17372063345 | 2026-04-30 | |
| FileHash-SHA256 | 9ef879b702878dcc1c95148bb21a3f3f951d4e223e46ec20f103c69bbba896a0 | SHA256 of 25604ed81bc7b603897e390c3c7920e0 | 2026-04-30 | |
| FileHash-SHA256 | b4694109e017aa6bf0604f8ef3e65d3cfe880f04e876da272a4226d5c7ab7d97 | SHA256 of 3711004997a5efc09e3eefab8b2fa91f | 2026-04-30 | |
| URL | http://b2026.biltly.cc/ | — | 2026-04-30 | |
| URL | https://ca.gov-okqs.bond/portal | — | 2026-04-30 | |
| URL | https://lu-retrofacturation.com | — | 2026-04-30 | |
| URL | https://myparking-help.com | — | 2026-04-30 | |
| URL | https://polices-govt.link/nz | — | 2026-04-30 | |
| URL | https://seguridad-ahora.im/dgt.xn--php-9o0a | — | 2026-04-30 | |
| domain | bibtly.cc | — | 2026-04-30 | |
| domain | bitcutt.cc | — | 2026-04-30 | |
| domain | confira.online | — | 2026-04-30 | |
| domain | lu-retrofacturation.com | — | 2026-04-30 | |
| domain | mcsms.io | — | 2026-04-30 | |
| domain | myparking-help.com | — | 2026-04-30 | |
| domain | paylinkt.vip | — | 2026-04-30 | |
| domain | polices-govt.link | — | 2026-04-30 | |
| domain | seguridad-ahora.im | — | 2026-04-30 | |
| hostname | b2026.biltly.cc | — | 2026-04-30 | |
| hostname | ca.gov-okqs.bond | — | 2026-04-30 | |
| hostname | eflow.ie-paytoll.info | — | 2026-04-30 | |
| hostname | im.air-pay.uk | — | 2026-04-30 |