Customer Support A Weak Link In Two Factor | Ars Technica
ID: 62085167-c388-5785-9d02-a2227b6ce0d7
STIX ID: report--62085167-c388-5785-9d02-a2227b6ce0d7
Feed Name: Security Ledger
Threat Score
Ars Technica describes a successful account takeover in which attackers convinced a victim's mobile carrier to enable call-forwarding, intercepting Google 2FA one-time codes and allowing access to the victim's Gmail and linked Instagram account; the article emphasizes mobile carrier customer-support social engineering as a critical weak link and suggests protective measures such as voice authorization PINs.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.