How cybercriminals steal one-time passcodes for SIM swap attacks and raiding bank accounts


The incoming phone call flashes on a victim’s phone. It may only last a few seconds, but can end with the victim handing over codes that give cybercriminals the ability to hijack their online accounts or drain their crypto and digital wallets.

“This is the PayPal security team here. We’ve detected some unusual activity on your account and are calling you as a precautionary measure,” the caller’s robotic voice says. “Please enter the six-digit security code that we’ve sent to your mobile device.”

Read more…
Source: TechCrunch


Sign up for our Newsletter


Related:

  • Spam and phishing in 2024

    February 19, 2025

    In 2024, cybercriminals targeted travel enthusiasts using fake hotel and airline booking websites. In one simple scheme, a fraudulent site asked users to enter their login credentials to complete their booking — these credentials ended up in criminal hands. Sometimes, the fake login form appeared under multiple brand names at once (for example, both Booking ...

  • StaryDobry ruins New Year’s Eve, delivering miner instead of presents

    February 18, 2025

    On December 31, cybercriminals launched a mass infection campaign, aiming to exploit reduced vigilance and increased torrent traffic during the holiday season. Kaspersky telemetry detected the attack, which lasted for a month and affected individuals and businesses by distributing the XMRig cryptominer. This previously unidentified actor is targeting users worldwide—including in Russia, Brazil, Germany, Belarus and ...

  • UK: Man jailed for abusive emails to politicians

    February 18, 2025

    A 39-year-old man has been jailed for sending malicious communications to a government minister, the mayor of London and a senior Met Police officer. Jack Bennett, of Newlands Park, Seaton, Devon, pleaded guilty to four counts of sending malicious emails; one to Safeguarding Minister Jess Phillips, one to Metropolitan police officer Matt Twist, and two counts ...

  • Argentine judge investigates fraud case against President Milei over crypto promotion

    February 18, 2025

    A judge in Argentina was selected Monday to investigate allegations of fraud against President Javier Milei for his brief promotion of a cryptocurrency whose value collapsed within hours of its launch last week. Milei distanced himself from the scandal and said he acted in good faith. Milei and his office denied involvement with creators of the ...

  • 50,000 electronic attacks countered daily by UAE Cybersecurity Council

    February 17, 2025

    Dr. Mohammed Hamad Al Kuwaiti, Chairman of the UAE Cybersecurity Council, stated that the UAE possesses an advanced cybersecurity system capable of predicting and countering most electronic attacks before they occur. He noted that the average daily cyberattacks on key sectors exceeds 50,000, all of which are proactively deterred and mitigated. In statements to the Emirates ...

  • Zacks Investment hit in data breach – 12 million users potentially at risk

    February 14, 2025

    A report by BleepingComputer cites a thread posted on an underground hacking forum claiming to have breached Zacks in June 2024, gaining sensitive information on 12 million people, including names, usernames, email addresses, postal addresses, and phone numbers. The forum thread contained a small sample, and an offer for the entire batch in exchange for a ...