Get the latest tech news
Second Factor SMS: Worse Than Its Reputation
One-time passwords are often sent via SMS. Security researchers from the CCC recently had live access to over 200 million such SMS messages from more than 200 affected companies.
Through techniques like SIM swapping or exploiting SS7 vulnerabilities in mobile networks, attackers can intercept SMS messages. The Chaos Computer Club (CCC) now demonstrates a previously neglected attack on 2FA-SMS: Service providers are commonly used to send these messages. Take over WhatsApp numbers Conduct financial transactions or log in to various services without access to the phone, provided the password was known
Or read this on Hacker News