PHISHCA
Cybercriminals routinely target Canadians with phishing lures -- often via text messages (also known as "smishing") -- impersonating financial institutions, government entities, telecommunications and other companies. Their goal is to steal banking or credit card data as well as other personal identification information in order to perpetrate fraud or sell this data to other fraudsters.

PHISHCA identifies and analyzes phishing threats targeting Canadians.

BLOG
Fraudsters Go Local: Toronto Parking Violations

Jan 15, 2024

phish sms toronto

We received an phishing SMS spoofing the City of Toronto. The message indicated that the recipient was issued a parking ticket that needed to be paid. The message threatened the recipient with the "revocation of your driving privileges" in an effort to generate a sense of urgency and trick the recipients into handing over their payment card details to the frausters.

The domain contains the keywords "parking", "toronto" and "infraction" in order to appear legitimate.

Phishing SMS impersonating RBC Royalbank

Jan 15, 2024

phish sms rbc

Today we received an SMS spoofing RBC Royalbank. In order to seem legitimate, the fraudsters used the first 5 digits used by RBC accounts, and claimed that the recipient's account was on hold. The domain contains the keywords "rbc", "debit" and "assist" to try and appear legitmate and meaningful to recipients.

Phish URL Date
https://parkingtoronto-infraction.com/ 2024-01-15
https://rbcdebitassist.com/ 2024-01-15