Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
11 IOCs

Operation Road Trap: Fake toll and parking texts are spreading worldwide

Bitdefender
Bitdefender
Published April 29, 2026Original Report

Threat Actors

Malware Families

Excerpt

Bitdefender Labs Warns of Global Fake Toll Text Scams Company Blog For Home For Business For Partners Consumer Insights Labs Business Insights Scam Research 12 min read Operation Road Trap: Fake toll and parking texts are spreading worldwide Alecsandru Cătălin DAJ Alina BÎZGĂ Adina Lenuta Maria COLF (MATEESCU) Vlad CONSTANTINESCU April 29, 2026 A new mass smishing campaign uncovered by Bitdefender Labs shows that scammers are sending tens of thousands of fraudulent text…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYPlayINFRASTRUCTUREeflow.ie-paytoll.infoCAPABILITYMETA StealerPlayVICTIMunknown
Adversary(1)
Infrastructure(1)
Capability(2)
Victim

Indicators of Compromise

Open the mindmap →

11 indicators

TypeIndicatorConfidenceScoreFirst Seen
MD525604ed81bc7b603897e390c3c7920e0MediumScore 53/100First seen
MD571bd06e73ad26ccf19cbc59c02630f14MediumScore 53/100First seen
MD5bcc411c84a3ba169e1f989929115834fMediumScore 53/100First seen
MD5ce83808d52dcfff0c6f96ee5874fd841MediumScore 53/100First seen
Domaineflow.ie-paytoll.infoHighScore 58/100First seen
MD5a2b03b138ec0a6263b73e17372063345MediumScore 53/100First seen
MD53711004997a5efc09e3eefab8b2fa91fMediumScore 53/100First seen
MD53c45b541cb7f29bb60a83564850e775aMediumScore 53/100First seen
MD5fdd449fc92ea92b8a5b5478b56c56ecdMediumScore 53/100First seen
MD5116b2280004a9d313a30acb767b1a85eMediumScore 53/100First seen
MD5014cda697a053d39f0504f626cb4aa4bMediumScore 53/100First seen

IOC Relationship Graph

Building graph…