Hackers claim they breached T-Mobile more than 100 times in 2022

Post by SpaceManNabs » Tue, Feb 28, 2023, 11:48 PM UTC

chatmasta wrote: post #200

SpaceManNabs wrote: post #87

How does one protect themselves from this? I have an iphone with esim and 2FA on most things, but there are still use cases that send codes via text.

Most of these breaches happen because someone gets targeted - something about their public profile lands them on the radar of the hackers. Then the hackers dig into the profile looking for associated phone numbers. So to mitigate this, you could (1) reduce your public profile, which is out of scope here, and/or (2) minimize phone number exposure. You want to make it impossible for someone targeting you to locate the…

Post by KyeRussell » Wed, Mar 01, 2023, 12:06 AM UTC

mrb wrote: post #242

ctvo wrote: post #65

I was a victim of this last October and November on a T-Mobile number. This is what occurred: - My Gmail account was compromised - My Amazon account was compromised In Gmail, they added a filter to hide any shipping or customer service messages from Amazon. In Amazon, every other day, they placed an order for a ~500 USD GoPro device, delivered to an address in NYC. This address changed with every order. Both password…

As an InfoSec professional, what you describe sounds more like a device-level compromise of your iphone, perhaps through a malicious app, or link you clicked. What your experienced can't be done with just a sim swap attack, as you would have lost access to your phone number. And it can't be done with the described T-Mobile hack, as it would have given the hackers silent access to your texts, so they could have reset…

Post by wnevets » Wed, Mar 01, 2023, 12:26 AM UTC

computing wrote: post #267

wnevets wrote: post #237

Earlier quoted context omitted.

> they pay-off / trick a T-Mobile employee into re-assigning your Google Voice number to them. Are you saying the Google Voice phone number lock is useless and that any carrier can just steal Google Voice numbers regardless of the lock status?

here is a link to a report of that happening to a Google Fi customer: https://old.reddit.com/r/GoogleFi/comments/10pjtie/google_fi... I don't work at Google and don't know if this is possible with Google Voice. However, Google Fi is their paid service, so I would assume that's the one they'd want to protect the most.

Post by abawany » Wed, Mar 01, 2023, 12:28 AM UTC

photon12 wrote: post #8

> T-Mobile declined to answer questions about what it may be doing to beef up employee authentication. But Nicholas Weaver, a researcher and lecturer at University of California, Berkeley’s International Computer Science Institute, said T-Mobile and all the major wireless providers should be requiring employees to use physical security keys for that second factor when logging into company resources. > “These breaches…

Post by abawany » Wed, Mar 01, 2023, 12:47 AM UTC

wnevets wrote: post #26

outworlder wrote: post #11

> Phish T-Mobile employees for access to internal company tools, and then convert that access into a cybercrime service that could be hired to divert any T-Mobile user’s text messages and phone calls to another device. If they are doing all this through phishing and aren't being as successful with other networks there's some serious issue that's being overlooked. It's unclear from the article if this is due to traini…

> But there's still a large number of sites and services that rely on SMS. I avoid using my actual phone number whenever possible and use a Google Voice number. Hacking Google Voice would require hacking my actual Google account instead of just tricking someone at the phone company.