INTERNET CRIME COMPLAINT CENTER\’S (IC3) SCAM ALERTS

E-ZPASS SPAM CAMPAIGN

The IC3 has received reports of a phishing scam involving E-ZPass. The E-ZPass group is an association of 26 toll agencies in 15 states that operate the E-ZPass toll collection program. The IC3 has received more than 560 complaints in which a victim receives an e-mail stating they have not paid their toll bill. The e-mail gives instructions to download the invoice by using the link provided, but the link is actually a .zip file that contains an executable with location aware malware. Some of the command and control server locations are associated with the ASProx botnet, which has previously disseminated other spam imitating major retail stores. It does not appear the E-ZPass e-mails actually attempt to entice recipients to pay anything. Rather, the infected machines are reportedly used for advertising click-fraud.