Ask HN: I found out a hacker's phone number. Now what?

#1

Post by throwawaySaaS1 » Wed, May 13, 2020, 3:49 AM UTC

Hi guys,

I run a SaaS business in Canada, and I had an individual attempting to gain access to one of our customer's account illegally via social engineering (pretending that she's an employee of the customer) I asked for her phone number as a part of verification process (completely made up), and I was able to speak with her briefly. During our phone call, she blatantly lied about being my customer's wife when I know for fact that he's single.

I checked out the government's website about reporting a cybercrime, but it seems to have very little resources available. Their office's closed right now, so I'll give them a call tomorrow.

Has anyone experienced a situation like this?

Re: Ask HN: I found out a hacker's phone number. Now what?

#2

Post by jki275 » Wed, May 13, 2020, 4:17 AM UTC

4chan.

You know what to do.

(don't really do this. But it would be fun...)

Re: Ask HN: I found out a hacker's phone number. Now what?

#3

Post by tlb » Wed, May 13, 2020, 4:48 AM UTC

Make a note for the support people to ignore fraud attempts matching the details.

Then move on.

Re: Ask HN: I found out a hacker's phone number. Now what?

#4

Post by tlbsofware » Wed, May 13, 2020, 5:45 AM UTC

jki275 wrote: post #2

4chan. You know what to do. (don't really do this. But it would be fun...)

It could’ve been someone who performed a sim swap on another in order to leave no trace though, or a prepaid phone number that will be recycled after a year

Re: Ask HN: I found out a hacker's phone number. Now what?

#5

Post by geocrasher » Wed, May 13, 2020, 5:57 AM UTC

Give her access to an empty account, then log everything she does. Block her and report as necessary.

Re: Ask HN: I found out a hacker's phone number. Now what?

#6

Post by cbanek » Wed, May 13, 2020, 6:01 AM UTC

While the crime is done using computers, it seems like it could be fraud, if they are trying to use the access to spend money or steal information to do something with?

Given the nature of the attack being aimed directly for one customer, if I were you, I would possibly alert that customer that something funny is up. That way they might be able to prevent the same thing happening at other companies they use that might not be as careful.

As far as dealing with the police, if they didn't manage to get anything, I wouldn't bother. Keep the info around just in case.

Re: Ask HN: I found out a hacker's phone number. Now what?

#7

Post by villgax » Wed, May 13, 2020, 6:08 AM UTC

FCC has a page for this

Re: Ask HN: I found out a hacker's phone number. Now what?

#8

Post by _nalply » Wed, May 13, 2020, 6:42 AM UTC

It's most surely not the hacker's phone number.

Re: Ask HN: I found out a hacker's phone number. Now what?

#9

Post by dorkwood » Wed, May 13, 2020, 6:44 AM UTC

One thing that might ruffle their feathers a bit is if you figure out what time zone they're in, and then give them a call in the middle of the night.

Re: Ask HN: I found out a hacker's phone number. Now what?

#10

Post by sdan » Wed, May 13, 2020, 7:08 AM UTC

_nalply wrote: post #8

It's most surely not the hacker's phone number.

Definitely: “hackers phone number” is an oxymoron, because no somewhat experienced hacker would ever give out their personal number.

Don’t be shocked if it’s some twilio or google voice number