ZantaWB | 3 years ago | on: “They wanted my Instagram handle, and somehow they've now got it.”
ZantaWB's comments
ZantaWB | 3 years ago | on: “They wanted my Instagram handle, and somehow they've now got it.”
In that story the basic technique was a SIM-swapping attack [2]. Fraudster calls the cell provider, claims to be the victim and that they lost their phone. Cell provider then ports the phone identity over to a new SIM. After that the fraudster just resets the account's password and gets the 2FA SMS (or even easier, one-time passwords) to their newly connected phone. Don't know if that same basic technique still applies nowadays, but in any case the most surprising part of the episode to me was how large and mature a black market there was for these account handles.
[1] https://gimletmedia.com/shows/reply-all/v4he6k
[2] https://en.wikipedia.org/wiki/SIM_swap_scam
e: Corrected, original post incorrectly said new number, not new SIM.
ZantaWB | 3 years ago | on: "Ducks,” the Canadian cartoonist Kate Beaton’s new graphic memoir
ZantaWB | 3 years ago | on: Instagram, TikTok, and the Three Trends
ZantaWB | 9 years ago | on: Is Every Speed Limit Too Low?
ZantaWB | 10 years ago | on: The xkcd survey