4 ms·
The messages reveal that each time LAPSUS$ was cut off from a T-Mobile employee’s account — either because the employee tried to log in or change their password
by exhilaration 5y ago
The messages reveal that each time LAPSUS$ was cut off from a T-Mobile employee’s account — either because the employee tried to log in or change their password — they would just find or buy another set of T-Mobile VPN credentials. T-Mobile currently has approximately 75,000 employees worldwide.
As a T-Mobile customer, this does not inspire confidence...
- Scoundreller 5y agoBeen happening at t-mobile since like 2004 > Hollywood’s hacker war began on February 19, 2004 with a simple phone call. It happened at a T-Mobile store near Los Angeles. The caller told the salesperson he was from the T-Mobile headquarters in Washington. “We heard you’ve been having problems with your customer account tools?” The caller said. “No, we haven’t had any problems really,” the clerk replied, “just a couple slowdowns. That’s about it.” > “Yes, that’s what is described here in the report,” the caller replied. “We’re going to have to look into this for a quick second.” > “All right, what do you need?” Then he dutifully gave the caller the company’s internal web site for managing customer accounts — https://www.wired.com/2015/11/the-hacking-of-hollywood/ https://www.wired.com/2015/11/the-hacking-of-hollywood/
- aserdf 5y agotmobile is terrible and I loathe them but are the alternatives better? is twilio viable for personal cell use?
- deleted 5y ago[deleted]
- ianhawes 5y agoI will say that, as someone who knew the above mentioned hacker when I was underage, ATT and Verizon methodically train their employees on pretexting and other social engineering attacks. While they may have their flaws, they both have a culture of security and privacy that is completely different from TMOB.
- albrewer 5y agoThere was a Darknet Diaries episode recently[0] that focused on a guy who frequently did phone scams, and he said Verizon was the most expensive to hack because you had to basically pay a bribe to get into their systems. [0] https://darknetdiaries.com/episode/112/ https://darknetdiaries.com/episode/112/
- deleted 5y ago[deleted]
- 0des 5y agoffs, stop using cell phones. this goes double for smart phones.
- jabroni_salad 5y agoYour landline provider also has fallible CSRs. Webmail providers don't even have service, which can be a curse as much as it is a blessing Anyone can commit megafraud against you by filing a USPS change of address form on your behalf to intercept all your paper correspondence, not to mention the rampant straight up package theft the past few years. We need a more comprehensive plan than just 'dont use phones'. As long as correspondence has value, someone is going to try and steal it.
- 0des 5y agoMy who? I don't have a land line.
- Forgeties79 5y agoThat’s not a real solution.
- 0des 5y agoIt is, in the most literal sense.
- deleted 5y ago[deleted]
- jaywalk 5y agoTwilio's "Programmable Wireless" product does not allow phone calls, and actually uses T-Mobile in the US. So no, it's not viable at all.
- ec109685 5y agoSurprising the guy from Sony mentioned in that article who called it a, “valid business decision to accept the risk of a security breach” Still works there in the same capacity: https://www.mesaonline.org/conferences/with-leadership-awards-2021/ https://www.mesaonline.org/conferences/with-leadership-award...