posts
In January 2024, the SEC's official X (formerly Twitter) account was hijacked after a threat actor convinced a mobile carrier to transfer the agency's phone number to a new SIM card. The attacker used SMS verification codes to reset the password and post a fake announcement
A $38 Million SIM Swap Should Settle This Debate In January 2024, the SEC's official X (formerly Twitter) account was hijacked. The attacker used a SIM swap to intercept SMS verification codes, then posted a fake announcement about Bitcoin ETF approval that briefly moved markets. The most powerful
In February 2022, a teenage hacker tricked a T-Mobile employee into performing a SIM swap, then used that hijacked phone number to intercept SMS verification codes and breach Lapsus$ targets including Nvidia and Microsoft. The attack wasn't sophisticated. It didn't require zero-day exploits. The threat actor
