article thumbnail

Two Charged in SIM Swapping, Vishing Scams

Krebs on Security

Two young men from the eastern United States have been hit with identity theft and conspiracy charges for allegedly stealing bitcoin and social media accounts by tricking employees at wireless phone companies into giving away credentials needed to remotely access and modify customer account information. Prosecutors say Jordan K.

Scams 295
article thumbnail

Recycle Your Phone, Sure, But Maybe Not Your Number

Krebs on Security

New research shows how fraudsters can abuse wireless provider websites to identify available, recycled mobile numbers that allow password resets at a range of email providers and financial services online.

Mobile 339
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

How 1-Time Passcodes Became a Corporate Liability

Krebs on Security

This phishing gang apparently had great success targeting employees of all the major mobile wireless providers, but most especially T-Mobile. Between July 10 and July 16, dozens of T-Mobile employees fell for the phishing messages and provided their remote access credentials.

Mobile 277
article thumbnail

RaidForums Gets Raided, Alleged Admin Arrested

Krebs on Security

One incident described in an affidavit by prosecutors (PDF) appears related to the sale of tens of millions of consumer records stolen last year from T-Mobile , although the government refers to the victim only as a major telecommunications company and wireless network operator in the United States.

article thumbnail

Recycle Your Phone, Sure, But Maybe Not Your Number

Security Boulevard

New research shows how fraudsters can abuse wireless provider websites to identify available, recycled mobile numbers that allow password resets at a range of email providers and financial services online. The post Recycle Your Phone, Sure, But Maybe Not Your Number appeared first on Security Boulevard.

Mobile 52
article thumbnail

The Rise of One-Time Password Interception Bots

Krebs on Security

A simple slash command allows a user to enable various ‘modes’ — scripts aimed as various services — that can target specific banks, as well as PayPal, Apple Pay, Google Pay, or a wireless carrier.

Passwords 312
article thumbnail

Actions Target Russian Govt. Botnet, Hydra Dark Market

Krebs on Security

The FBI and other agencies warned in March that the Cyclops Blink malware was built to replace a threat called “ VPNFilter ,” an earlier malware platform that targeted vulnerabilities in a number of consumer-grade wireless and wired routers.

Marketing 234