The Fake Speeding Ticket Scam - What Will Hackers Think of Next?
What is it?
A new malware phishing threat has emerged that uses smartphone GPS and fake speeding tickets to install malware on computer systems. Residents in Pennsylvania have received emails appearing to come from a local police department claiming that they were caught speeding and including a link to a site claiming to show “proof” of the violation and a photo of the victim’s license plate. When the user clicks the link, malware is downloaded on to their computer.
How does it work?
While phishing scams aren’t a new thing, this is actually a pretty sophisticated scam. What makes this scam unique is that the fake emails appear to contain accurate traffic data with street names and actual locations where the victims were at some point in time.
It is thought that the location information is received by the developers of an app that has access to smartphone GPS data. It is still unknown whether or not the hackers have breached the database of a legitimate app or created their own app. It is not uncommon for apps to require or request GPS data—in fact many apps have access to many different parts of our mobile devices. For more info please read http://blog.inspiredelearning.com/application-permission-creep
What should you do?
If you receive such an email, contact your local police department before clicking any links. Even though the message may appear to be legitimate with accurate information, it is highly unlikely that a police department would notify the public of traffic violations via email. Violation notices are delivered in person or through the US mail.
Tyler Cohen Wood, Inspired eLearning, LLC
Mar 28, 2016