4 ms·

I think that scenario requires someone registering the domain and hijacking the identity a few days after death? Quite unlikely it seems.

• mingus88 3y ago
  My mother in law’s bank account was drained within a week of her passing. Evidently someone at the hospital had to have been involved, although we never learned the vector. It’s really not a stretch to imagine a sophisticated attacker who specializes in identity theft paying off hospital staff for access to dead patient’s info, even phones. It’s the last thing on the families minds. We already know that insiders at cell providers are working with SIM swappers to compromise SMS verification. Why is it unlikely for hospital staff to do the same?
  • danillonunes 3y ago
    That's a very specific and small target to aim. Your victim not only has to use an email with their own domain, but they also need to have their domain expire at about the same time as they die. Wait too long and the family already had access to the bank through traditional means.