2 ms·
It subverts 2FA and SMS because of SIM hijacking. If a bad actor has your mobile number and you use that for 2FA, they can socially engineer (or bribe) a rep f
by anonymousiam 6y ago
It subverts 2FA and SMS because of SIM hijacking. If a bad actor has your mobile number and you use that for 2FA, they can socially engineer (or bribe) a rep from your mobile company to assign your number to a new SIM/phone.
This is a common attack these days.
https://www.theverge.com/2019/5/11/18564381/community-hacking-sim-hijacking-cryptocurrency https://www.theverge.com/2019/5/11/18564381/community-hackin...
- fckthisguy 6y agoTo elaborate how easy this is: I did this recently in my own number after loosing the sim card. I just called up the phone company and convinced the customer service agent to assign the number to a new sim card I had just bought from the petrol station near my house. I provided no authentication for this and they had no way to prove I was the owner of the account. Took all of 5 minutes to pull off.