Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
101010.pl is one of the many independent Mastodon servers you can use to participate in the fediverse.
101010.pl czyli najstarszy polski serwer Mastodon. Posiadamy wpisy do 2048 znaków.

Administered by:

Server stats:

506
active users

101010.pl: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.4.0-beta.1

#simswapping

0 posts0 participants0 posts today
Efani

$38,000… GONE while he was sleeping.

That’s how fast SIM-swapping can destroy your financial life.

In just 3 hours, a hacker took over Justin Chan’s phone number, intercepted his two-factor codes, and emptied his bank and trading accounts. No alarms. No notifications. Just silent access and drained funds.

It didn’t happen because he was careless.
It happened because the attacker exploited a broken system:

- His mobile carrier transferred his number to a new device without proper checks
- His 2FA codes were sent to that new device
- His bank and investment apps trusted that number

This is the $38,000 mistake most people never see coming. Because by the time you realize something is wrong — it’s already too late.

The worst part? Getting the money back was harder than the hack itself.
It took media pressure, endless follow-ups, and months of stress just to get refunded.

Mobile numbers are the new master key — and most people are handing them out unlocked.

If your 2FA is tied to your phone number, it's time to change that.
If your carrier doesn’t lock down your SIM by default, it’s time to upgrade.
And if your bank’s idea of protection is a form letter and a closed case, don’t wait for a wake-up call at 3AM.

#SIMSwapping#CyberSecurity#MobileSecurity
Dissent Doe :cupofcoffee:

Noah Urban, aka "King Bob" and a suspected member of Scattered Spider, pleaded guilty this week in a case involving wire fraud, cryptocurrency theft, phishing, and simswapping. He had cases against him in Florida and California. Other people indicted with him have yet to be tried or to make plea deals, and one young man from Scotland has been detained in Spain pending determination of extradition request (I haven't found any update on the extradition case).

databreaches.net/2025/04/06/fl

or jump directly to Urban's plea agreement:
storage.courtlistener.com/reca

#wirefraud, #cryptocurrency, #phishing, #simswapping, #identitytheft

apfeltalk :verified:

Schluss mit SMS-Codes: Google ersetzt Authentifizierung bei Gmail durch QR-Codes
Google hat angekündigt, die SMS-basierte Zwei-Faktor-Authentifizierung (2FA) bei Gmail durch QR-Codes zu ersetzen. Mit dieser Änderung verfol
apfeltalk.de/magazin/news/schl
#News #Services #Authentifizierung #Gmail #Google #Kontoschutz #Phishing #QRCode #Sicherheit #SIMSwapping #SMSCodesAblsen #ZweiFaktorAuthentifizierung

AAKL

From yesterday. #cybersecurity #infosec #SIMSwapping

"I’m still unsure of how this person got access to my accounts, whether through my social security number, phone number or date of birth, or possibly a recording of my voice."

"It was a hard lesson in how vulnerable we are when you lose control of our personal information that is so publicly available."

What’s worse than thieves hacking into your bank account? When they steal your phone number, too apnews.com/article/fraud-ident @AP

AP News · What's worse than thieves hacking into your bank account? When they steal your phone number, tooBy FATIMA HUSSEIN
Richi Jennings

Widespread spam targets carrier employees, as scrotes try harder to evade two-factor authentication.

It’s no secret that cellular carrier reps are subject to bribery. Here’s a great example. Yes, again with the #SIMswapping.

Someone seems to have stolen a contact list of T-Mobile employees and is texting them offers of bribes to execute SIM swaps. But T-Mobile denies it’s been hacked… again.

Here’s the soft underbelly of the insider threat model. In #SBBlogwatch, we balk at the three-Benjamin bribes. At @TechstrongGroup’s @SecurityBlvd: securityboulevard.com/2024/04/

Security Boulevard · SIM Swappers Try Bribing T-Mobile and Verizon Staff $300Not OK: SMS 2FA — Widespread spam targets carrier employees, as scrotes try harder to evade two-factor authentication.
kjaerulv

"While MFA had previously been enabled on the @SECGov X account, it was disabled by X Support, at the staff's request, in July 2023 due to issues accessing the account," the SEC said in a statement" #simswapping
Share Message - US regulator admits cyber-security lapse before rogue Bitcoin post
bbc.co.uk/news/technology-6802

BBC NewsUS regulator admits cyber-security lapse before rogue Bitcoin postRegulator admits key security procedure on X account was suspended six months before it was hacked.
*
Tymoteusz Jóźwiak :verified:

Od czerwca 2024 będzie można zastrzec swój PESEL - taką informację przekazało 16 maja Ministerstwo Cyfryzacji. Jednak wprowadzane rozwiązanie zdaje się nie rozwiązywać wszystkich problemów. Sprawę omawiam szerzej w nowym artykule na - jozwiak.top/blog/jak-projekt-m

jozwiak.topJak zastrzeżenie numeru PESEL wpłynie na SIM swapping?Ministerstwo Cyfryzacji poinformowało 16 maja, że zapowiadana niegdyś możliwość zastrzeżenia numeru PESEL będzie funkc...
#infosec#cyberbezpieczeństwo#SIMswapping
Anthony Collette :donor: / Loistava

Psycho Bunny To The Rescue

After gaining control of her phone, hackers ripped off Avery Hartmans for $10,000.

Even worse, her credit card company didn’t believe the charges were fraudulent. Three weeks shy of her wedding, she was saddled with $9,778.24 in debt.

This interactive retelling of her ordeal is an awesome way to introduce people to the reality of organized crime attacking ordinary consumers through SIM swapping and physical theft of credit cards.

You don’t have to be “somebody special” to wind up on the receiving end of digital fraud.

And half of all victims of identity theft wind up being victimized again.

This is a great read, and the interactive pieces make the story more engaging.

businessinsider.com/credit-car

#InfoSec
#SIMSwapping

*
Efani

> 400M Twitter accounts data is on sale, among which the most critical are username, mobile numbers & email. Hacker was able to provide a sample list of 1000 usernames, and our founder Haseeb Awan was able to verify many of them.

There are some serious concerns with the #databreach

1 - Identities of many pseudo accounts will be public
2 - With a phone number, it's super easy to find anyone's address and banking information.
3 - Multiple phishing attempts via cellphone, physical, or email
4 - #simswapping attacks to take over your bank account, social media, or confidential information

Preventative tips:

1 - Ensure that your MFA/non-sms 2FA is turned ON for every account that you use via #Authy #GoogleAuthenticator
2 - Switch to @Efani (irrespective of biasness, we have a 100% track record of securing your phone number, and no one provided any insurance)
3 - Use a #passwordmanager. Keeper Security Enterprise password Manager is ideal, but #DYOR.
4 - Call your bank and tell them to put a limit on withdrawals above
5 - Use a hardware wallet. #NGRAVE which is ideal, but #DYOR.
6 - Get Optery, getagency.com, or BLACK CLOAK for digital security

ExploreLive feeds
About