Make no mistake: using 2FA is still better than not using it. These 2FA threats only further highlight the problem we already know about SMS-based and phone-call-based authentication OTP methods: they have weaknesses that can be easily exploited by threat actors. For additional services on top of the bot, they need to hand over an extra $20-$100 USD more. Those looking to operate these bots are expected to shell out $300 USD monthly. The commands threat actors can key in to use SMSRanger, which is noted to be "extremely easy to use" and has an efficiency rate of 80 percent. Another bot, SMS Buster, was mentioned, but the researchers said operating it requires more effort on the part of the threat actor. The two bots that are becoming criminal favorites are SMSRanger and BloodOTPbot, according to Intel 147. " either operate via a Telegram bot or provide support for customers via a Telegram channel," Intel 147 wrote, "In these support channels, users often share their success while using the bot, often walking away with thousands of dollars from victim accounts." Intel 147 has been observing these activities since June when services like these started operating.
Other services target "other popular social media platforms or financial services, providing email phishing and SIM swapping capabilities." These services include calling their target victims, appearing to be from their bank, and socially engineering them into handing over a one-time password (OTP)-or other verification code-to the bot operators. Yesterday, security intelligence firm, Intel 147, revealed it had noticed an uptick of activity in threat actors providing access to services in Telegram that circumvent two-factor authentication (2FA) methods. But where users put up walls, you can be sure there are cybercriminals trying to break them down. Two-factor authentication is a great way to protect your online accounts, and we always recommend you turn it on.
0 kommentar(er)
