Collaborate Disseminate
Scammers have leapt at the opportunity to exploit vulnerable UK residents by sending bogus messages telling them they need to take action to receive help with their winter heating bills.
Read more in my article on the Tripwire State of Security blog. Continue reading Winter Fuel Payment scam targets UK citizens via SMS
Can someone make it look like I reacted to a text sent by them? We have iPhones. They are using a 3rd party app (I do not know which one). I saw the notification the other day on my Home Screen that the other user laughed at their own text… Continue reading Can you spoof react a message? [closed]
TL;DR: How can I stop people calling my phone and sending texts?
Background: I’ve have had the same cell phone number for over 30 years. However, when I google my phone number I see four people who live 40 miles away have for the last ten … Continue reading I am being spammed due to others using my cell number as theirs. How do I stop this? [closed]
Sweden is accusing Iran of hacking SMS service and sending out thousands of text messages calling for revenge over Quran burnings.
The post Iran Was Behind Thousands of Text Messages Calling for Revenge Over Quran Burnings, Sweden Says appeared first o… Continue reading Iran Was Behind Thousands of Text Messages Calling for Revenge Over Quran Burnings, Sweden Says
I’m trying to elaborate a login scenario with SMS verification code. Not sure whether it’s an attack vector or not.
Assume, we have a N = 3 digit code sent to a user mobile phone (3-digit code just for the sake of simplicity in calculation… Continue reading Is there an attack vector for SMS verification code using a bunch of parallel requests
Sometimes when you try to log in to a newly-created Google account, Google will block your log-in attempt saying "We’ve detected unusual activity on the account that you’re trying to access," and ask you to enter a phone number t… Continue reading How is Google’s phone policy more secure? [duplicate]
I’m adding 2FA to my app and have set it up for users who have registered with email. I also have users who log in with Facebook and others who use their mobile number.
Should I also add TOTP for users who log in with Facebook, or is that … Continue reading Do I need to add TOTP 2FA for Facebook and mobile number logins in my app?
New SMS Stealer Alert! The massive campaign targets Android users globally. The scope of this campaign is staggering… Continue reading Global SMS Stealer Targeting Android Users via Malicious Apps and Ads
We performed the security analysis of a Telit Cinterion modem in course of a bigger project of security assessment of a popular model of a truck and found eight vulnerabilities. Continue reading Cinterion EHS5 3G UMTS/HSPA Module Research
This is a problem that many of us face: A surprising number of financial institutions’ websites offer additional authentication only via SMS and/or phone call. But I will refer to my situation specifically.
How can this be made safe again… Continue reading How to make SMS-based 2FA safer?