Categories: Security Hacker

Hacker Group Stolen $5 Million Through SIM Swapping Hacks

A 20-year-old college student Joel Ortiz from Boston arrested by police on July 12 for being a part of the hacker group who hacked a number of cellphone numbers using SIM swapping technique and stolen more than $5 million in cryptocurrencies.

The hacker group targets users associated with cryptocurrency and blockchains, by tricking the telecommunication providers they swap the target Phone number to the SIM controlled by the attackers. By having the control over the phone number the hacker group reset the login credentials and get access to the victim’s account.

SIM swapping or SIM Hijacking is the technique used by criminals to register an already existing number on a new SIM card, so they can intercept the OTPs and can reset the login credentials.

According to Motherboard report, Ortiz was arrested in Los Angeles International Airport on his way to Europe and he is to face charges on 28 sections “13 counts of identity theft, 13 counts of hacking, and two counts of grand theft.”

Between February and March Ortiz targeted a blockchain projects investor, hijacked his cellphone number, reset password for Gmail account and cryptocurrency accounts of the investor. Investigator’s contact AT&T to find the devices IMEI numbers of the devices that used the investor’s number.

Once they have the IMEI numbers the investigators have sent the warrant to Google which discloses the email address connected with the device and then investigator’s blocked the cryptocurrency exchanges used by Ortiz. Full investigation report can found in Motherboard.

The SIM swapping attacks are in raise and anybody can fall prey to it. Last month Powai-based women fall’s victim for SIM Swap fraud and loses Rs 1 lakh.

Common Bank Fraud Techniques to steal your Information

Vishing

Vishing also knows as Voice Phishing, a social engineering technique used by attackers over the telephone system to gain financial details, by using this method attackers steal payment card details.

Phishing

Commonly carried out via e-mail spoofing and instant messaging, attackers present a fake page posing to be a trusted source and steal your banking credentials.

Smishing

Smishing also knows as SMS phishing that involves in text messaging, the tactics used by attackers to leverage the payment card details and credentials.

Banking Malware

Banking malware is pushed through Social engineering, Phishing and spam emails and security vulnerabilities. They are designed to Steal Money, personal and financial information. Some of the well-known banking malware are Zeus, Spyeye, and Zitmo.

Also Read

US-CERT Alerts Powerful Emotet Banking Malware Attack on Government, Private and Public Sectors

New Variant of Dangerous Kronos Banking Malware Spreading via Malicious Word Documents

Beware of Fake Banking Malware Apps in Google Play That Steals Credit Card Details and Internet Banking Credentials

Gurubaran

Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Recent Posts

New Malware Hijacks Docker Images Using Unique Obfuscation Technique

A recently uncovered malware campaign targeting Docker, one of the most frequently attacked services according…

1 hour ago

Critical Browser Wallet Vulnerabilities Enable Unauthorized Fund Transfers

Researchers have disclosed a series of alarming vulnerabilities in popular browser-based cryptocurrency wallets that could…

1 hour ago

APT34 Hackers Use Port 8080 for Fake 404 Responses and Shared SSH Keys

Researchers have uncovered early indicators of malicious infrastructure linked to APT34, also known as OilRig,…

2 hours ago

Hackers Exploit Weaponized Word Docs to Steal Windows Login Credentials

A sophisticated phishing campaign has been uncovered by Fortinet’s FortiGuard Labs, targeting Windows users with…

2 hours ago

Cookie-Bite Attack Enables MFA Bypass and Persistent Cloud Server Access

Researchers have exposed a sophisticated cyberattack technique dubbed the "Cookie-Bite Attack," which allows adversaries to…

3 hours ago

Synology Network File System Vulnerability Allows Unauthorized File Access

A critical security vulnerability in Synology’s Network File System (NFS) service, tracked as CVE-2025-1021, has…

3 hours ago