We’re learning more about these groups sending messages through imessage, RCS

Today, we learn about a group which was part of a recent article dealing with the phish attacks on people for supposed missed shipments or tolls.

blog post and podcast

What interested me in this article is the fact that you can pretty much do this from anywhere, even a moving car; according to the article.

As discussed in the article, shipping messages, tax problems or toll issues are the purpose of these messages.

This group talked about is named Lucid which is a PhaaS product, similar to others that are talked about in other articles doing the same thing. Darcula is also noted as part of this particular group, but they may be similar in nature.

Let’s see what picture smart says about this sample message that is imaged herein.

The image shows three screenshots of text messages related to toll payments.

1. The left screenshot is from a sender with a New Jersey phone number, mentioning an additional toll fee of $4.15 and providing a link to settle the balance.

2. The middle screenshot is about an unpaid E-ZPass toll, warning of fines and registration suspension if not paid by February 2025. It includes a link for payment.

3. The right screenshot urges payment for FastTrak Lane tolls by January 2025 to avoid fines, with a link provided.

As the article states, some of these messages may tell you to respond to be able to get at the link. And as we later learn, this only works via mobile.

The article does state tht users should ignore these messages, and some of us on TSB have gotten these

You should definitely read this one, its a good one.

The article Phishing platform ‘Lucid’ behind wave of iOS, Android SMS attacks is what you need.

Please be careful, and don’t give your details to people you don’t trust. Check those links if you can, and our guide is located on EMHS where it is in the links section of the page.

Thanks so much for reading, listening and learning!