Text scams surge: global cybercrime campaign targets drivers

A sophisticated, multi-national text message fraud campaign is targeting drivers across 12 countries, including Spain, with devastating results – stealing data and draining bank accounts.

Criminals mimic official alerts, pressuring immediate payment

Bitdefender researchers have uncovered over 79,000 fraudulent texts and more than 31,900 malicious URLs linked to a coordinated cyberattack. The operation, active in at least 40 countries, leverages deceptive messages impersonating alerts from authorities like the Dirección General de Tráfico (DGT), generating immense pressure on victims.

The scheme relies on mimicking warnings about unpaid fines, traffic violations, or parking tickets, prompting users to quickly provide sensitive information and make unauthorized payments. Madrid, Catalonia, and Andalusia are currently hotspots for these scams, demonstrating a concentrated effort by the perpetrators.

Sophisticated tactics mask criminal intent

What’s truly alarming is the level of technical sophistication. Cybercriminals aren’t simply sending generic alerts. They’re employing techniques like sender spoofing – convincingly replicating the DGT’s branding – to bolster their credibility. The urgency they inject into these messages – threatening escalating fees or legal repercussions – is a calculated manipulation.

The potential fallout extends far beyond simple financial loss. Some campaigns are deploying malware designed to intercept SMS messages, access device data, and even remotely control mobile phones. Recent victims have received messages similar to: “Last reminder before your outstanding fine increases. View your record here: [malicious link].”

This isn’t a casual operation; it’s a meticulously planned, globally coordinated effort. Authorities are urging vigilance, especially in areas like Madrid, Catalonia, and Andalusia, where the attacks are most prevalent. Remember, if a call from a commercial call center – specifically mentioning the DGT or miMultas – seems too good to be true, it almost certainly is.

Don’t fall for the pressure

The core strategy is simple: create a sense of panic. Victims are given a limited timeframe to “resolve” the issue, often incurring additional penalties for inaction. Don’t click on suspicious links. Never provide personal or financial information over text message. A simple three-digit area code – such as those used in Spain – can be enough to identify the source of the scam. Report any suspicious messages immediately. The bottom line? Protect your data—and your wallet—by remaining skeptical and informed.