Saw this and thought I'd share.
A guy had $100,000 taken from his Coinbase account thanks to crooks porting his mobile number to a new SIM card. That allowed them to reset his gmail account (as the two factor authentication sent a code to his mobile), which in turn allowed them to reset his Coinbase password (as the password reset link was sent to his gmail).
Scary stuff and worth a read.
https://twitter.com/cooncesean/status/1130493867734605824?s=11
0
0
Also worth mentioning that this isn't some newbie. He's an engineering lead at a crypto company and previously wrote for CNET.
0
0
As if often the case the weak link seems to have his mobile phone company who let the hackers port the number. I've previously had to report to O2 the fact I'd changed my name and address on my online account and ordered a new phone without them thinking it was suspicious that I'd changed my name from a male name to a female name.
I have most accounts set up so I'm alert across several devices if another device accesses my account and this told me recently that my Netflix login had been used in Germany so I could immediately change my password.
Join the discussion