Trezor crypto wallets under attack in SMS phishing campaign

Willie Sutton, the criminal who became legendary for stealing from banks during a forty year career, was once asked, “Why do you keep robbing banks?”

His answer? “Because that’s where the money is.”

However, today there’s a better target for robb… Continue reading Trezor crypto wallets under attack in SMS phishing campaign

As Twitter forces users to remove text message 2FA, it’s in danger of decreasing security

Many Twitter users have been presented with a message telling them that SMS-based two-factor authentication (2FA) will be removed next month.

According to Twitter, only subscribers to its premium Twitter Blue service will be able to use text message… Continue reading As Twitter forces users to remove text message 2FA, it’s in danger of decreasing security

Operation Elaborate – UK police text 70,000 people thought to have fallen victim to iSpoof bank fraudsters

UK police are texting 70,000 people who they believe have fallen victim to a worldwide scam that saw fraudsters steal at least £50 million from bank accounts.

Read more in my article on the Tripwire State of Security blog. Continue reading Operation Elaborate – UK police text 70,000 people thought to have fallen victim to iSpoof bank fraudsters

Failures in Twitter’s Two-Factor Authentication System

Twitter is having intermittent problems with its two-factor authentication system:

Not all users are having problems receiving SMS authentication codes, and those who rely on an authenticator app or physical authentication token to secure their Twitter account may not have reason to test the mechanism. But users have been self-reporting issues on Twitter since the weekend, and WIRED confirmed that on at least some accounts, authentication texts are hours delayed or not coming at all. The meltdown comes less than two weeks after Twitter laid off about half of its workers…

Continue reading Failures in Twitter’s Two-Factor Authentication System