Friday, March 29, 2024

Hacker Group Stolen $5 Million Through SIM Swapping Hacks

A 20-year-old college student Joel Ortiz from Boston arrested by police on July 12 for being a part of the hacker group who hacked a number of cellphone numbers using SIM swapping technique and stolen more than $5 million in cryptocurrencies.

The hacker group targets users associated with cryptocurrency and blockchains, by tricking the telecommunication providers they swap the target Phone number to the SIM controlled by the attackers. By having the control over the phone number the hacker group reset the login credentials and get access to the victim’s account.

SIM swapping or SIM Hijacking is the technique used by criminals to register an already existing number on a new SIM card, so they can intercept the OTPs and can reset the login credentials.

According to Motherboard report, Ortiz was arrested in Los Angeles International Airport on his way to Europe and he is to face charges on 28 sections “13 counts of identity theft, 13 counts of hacking, and two counts of grand theft.”

Between February and March Ortiz targeted a blockchain projects investor, hijacked his cellphone number, reset password for Gmail account and cryptocurrency accounts of the investor. Investigator’s contact AT&T to find the devices IMEI numbers of the devices that used the investor’s number.

Once they have the IMEI numbers the investigators have sent the warrant to Google which discloses the email address connected with the device and then investigator’s blocked the cryptocurrency exchanges used by Ortiz. Full investigation report can found in Motherboard.

The SIM swapping attacks are in raise and anybody can fall prey to it. Last month Powai-based women fall’s victim for SIM Swap fraud and loses Rs 1 lakh.

Common Bank Fraud Techniques to steal your Information

Vishing

Vishing also knows as Voice Phishing, a social engineering technique used by attackers over the telephone system to gain financial details, by using this method attackers steal payment card details.

Phishing

Commonly carried out via e-mail spoofing and instant messaging, attackers present a fake page posing to be a trusted source and steal your banking credentials.

Smishing

Smishing also knows as SMS phishing that involves in text messaging, the tactics used by attackers to leverage the payment card details and credentials.

Banking Malware

Banking malware is pushed through Social engineering, Phishing and spam emails and security vulnerabilities. They are designed to Steal Money, personal and financial information. Some of the well-known banking malware are Zeus, Spyeye, and Zitmo.

Also Read

US-CERT Alerts Powerful Emotet Banking Malware Attack on Government, Private and Public Sectors

New Variant of Dangerous Kronos Banking Malware Spreading via Malicious Word Documents

Beware of Fake Banking Malware Apps in Google Play That Steals Credit Card Details and Internet Banking Credentials

Website

Latest articles

IT and security Leaders Feel Ill-Equipped to Handle Emerging Threats: New Survey

A comprehensive survey conducted by Keeper Security, in partnership with TrendCandy Research, has shed...

How to Analyse .NET Malware? – Reverse Engineering Snake Keylogger

Utilizing sandbox analysis for behavioral, network, and process examination provides a foundation for reverse...

GoPlus’s Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

GoPlus Labs, the leading Web3 security infrastructure provider, has unveiled a groundbreaking report highlighting...

Wireshark 4.2.4 Released: What’s New!

Wireshark stands as the undisputed leader, offering unparalleled tools for troubleshooting, analysis, development, and...

Zoom Unveils AI-Powered All-In-One AI Work Workplace

Zoom has taken a monumental leap forward by introducing Zoom Workplace, an all-encompassing AI-powered...

iPhone Users Beware! Darcula Phishing Service Attacking Via iMessage

Phishing allows hackers to exploit human vulnerabilities and trick users into revealing sensitive information...
Guru baran
Guru baranhttps://gbhackers.com
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Mitigating Vulnerability Types & 0-day Threats

Mitigating Vulnerability & 0-day Threats

Alert Fatigue that helps no one as security teams need to triage 100s of vulnerabilities.

  • The problem of vulnerability fatigue today
  • Difference between CVSS-specific vulnerability vs risk-based vulnerability
  • Evaluating vulnerabilities based on the business impact/risk
  • Automation to reduce alert fatigue and enhance security posture significantly

Related Articles