Saturday, February 22, 2025
HomeSecurity HackerHacker Group Stolen $5 Million Through SIM Swapping Hacks

Hacker Group Stolen $5 Million Through SIM Swapping Hacks

Published on

SIEM as a Service

Follow Us on Google News

A 20-year-old college student Joel Ortiz from Boston arrested by police on July 12 for being a part of the hacker group who hacked a number of cellphone numbers using SIM swapping technique and stolen more than $5 million in cryptocurrencies.

The hacker group targets users associated with cryptocurrency and blockchains, by tricking the telecommunication providers they swap the target Phone number to the SIM controlled by the attackers. By having the control over the phone number the hacker group reset the login credentials and get access to the victim’s account.

SIM swapping or SIM Hijacking is the technique used by criminals to register an already existing number on a new SIM card, so they can intercept the OTPs and can reset the login credentials.

According to Motherboard report, Ortiz was arrested in Los Angeles International Airport on his way to Europe and he is to face charges on 28 sections “13 counts of identity theft, 13 counts of hacking, and two counts of grand theft.”

Between February and March Ortiz targeted a blockchain projects investor, hijacked his cellphone number, reset password for Gmail account and cryptocurrency accounts of the investor. Investigator’s contact AT&T to find the devices IMEI numbers of the devices that used the investor’s number.

Once they have the IMEI numbers the investigators have sent the warrant to Google which discloses the email address connected with the device and then investigator’s blocked the cryptocurrency exchanges used by Ortiz. Full investigation report can found in Motherboard.

The SIM swapping attacks are in raise and anybody can fall prey to it. Last month Powai-based women fall’s victim for SIM Swap fraud and loses Rs 1 lakh.

Common Bank Fraud Techniques to steal your Information

Vishing

Vishing also knows as Voice Phishing, a social engineering technique used by attackers over the telephone system to gain financial details, by using this method attackers steal payment card details.

Phishing

Commonly carried out via e-mail spoofing and instant messaging, attackers present a fake page posing to be a trusted source and steal your banking credentials.

Smishing

Smishing also knows as SMS phishing that involves in text messaging, the tactics used by attackers to leverage the payment card details and credentials.

Banking Malware

Banking malware is pushed through Social engineering, Phishing and spam emails and security vulnerabilities. They are designed to Steal Money, personal and financial information. Some of the well-known banking malware are Zeus, Spyeye, and Zitmo.

Also Read

US-CERT Alerts Powerful Emotet Banking Malware Attack on Government, Private and Public Sectors

New Variant of Dangerous Kronos Banking Malware Spreading via Malicious Word Documents

Beware of Fake Banking Malware Apps in Google Play That Steals Credit Card Details and Internet Banking Credentials

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

SPAWNCHIMERA Malware Exploits Ivanti Buffer Overflow Vulnerability by Applying a Critical Fix

In a recent development, the SPAWNCHIMERA malware family has been identified exploiting the buffer...

Sitevision Auto-Generated Password Vulnerability Lets Hackers Steal Signing Key

A significant vulnerability in Sitevision CMS, versions 10.3.1 and earlier, has been identified, allowing...

NSA Allegedly Hacked Northwestern Polytechnical University, China Claims

Chinese cybersecurity entities have accused the U.S. National Security Agency (NSA) of orchestrating a...

ACRStealer Malware Abuses Google Docs as C2 to Steal Login Credentials

The ACRStealer malware, an infostealer disguised as illegal software such as cracks and keygens,...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

INDOHAXSEC Hacker Group Allegedly Breaches Malaysia’s National Tuberculosis Registry

The Indonesian hacker group "INDOHAXSEC" has allegedly breached the National Tuberculosis Registry (NTBR) of...

Europe’s Most Wanted Teenage Hacker Arrested

Julius “Zeekill” Kivimäki, once Europe's most wanted teenage hacker, has been arrested.Kivimäki, known for his involvement with the notorious Lizard Squad,...

MySQL Security Best Practices Guide – 2024

MySQL stands out for its reliability and efficiency among the various database systems available....