3 ms·
The usual account takeover playbook involves mining socials etc for the answers to password reset questions, and given the LexisNexis mentions in the article I
by Godel_unicode 4y ago
The usual account takeover playbook involves mining socials etc for the answers to password reset questions, and given the LexisNexis mentions in the article I would guess that’s what happened.
- imwillofficial 4y agoThanks, do you know where I can find more info on normal methods? This “playbook”
- Godel_unicode 4y agoThere have been a couple episodes of Darknet Diaries that have talked about this, I think “The Pizza Problem” and “Dirty Comms” maybe? He covers some SIM swapping stuff as well, and the arms race between companies security teams and the quickly professionalizing account takeover market. It’s a bit annoying to Google for obvious reasons, but there was a huge leak of celebrity photos in the early aughts that was similar; iCloud passwords reset because celebs used their actual pets names as their password questions etc.