Please register to access this content.
To continue viewing the content you love, please sign in or create a new account
Dismiss
This content is for our paying subscribers only

Twitter CEO hack highlights dangers of 'SIM swap' fraud

Eisen said it's not clear how many people are attacked in this manner



Jack Dorsey
Image Credit: Reuters

Washington:Even with considerable security precautions in place, Twitter chief executive Jack Dorsey became the victim of an embarrassing compromise when attackers took control of his account on the platform by hijacking his phone number.

Dorsey became the latest target of so-called "SIM swap" fraud which enables a fraudster to trick a mobile carrier into transferring a number - potentially causing people to lose control not only of social media, but bank accounts and other sensitive information.

This type of attack targets a weakness in "two factor authentication" via text message to validate access to an account, which has become a popular break-in method in recent years.

Twitter said Friday the account was restored after a brief time in which the attackers posted a series of offensive tweets.

But Ori Eisen, founder of Arizona-based security firm Trusona, which specializes in authentication without passwords, said the rapid fix should not be seen as an answer to the broad problem of SIM swap fraud.

Advertisement

"The problem is not over," Eisen said, noting that these kinds of attacks have been used to take over other high-profile social media accounts and for various kinds of fraud schemes.

Eisen said it's not clear how many people are attacked in this manner but that automated technology can create billions of calls that lure people into giving up information or passwords.

Advertisement