They Stole $24 Million Without Touching His Phone

Your bars disappear. "No Service." In a SIM swap, your phone number is moved to a stranger's phone, and with it every text, including the six-digit codes your bank and email send to prove you are you. • The case (federal court order, Terpin v. AT&T Mobility, March 28, 2023): on January 7, 2018, an employee at an authorized AT&T retailer was bribed to move Michael Terpin's number. From his email the attackers reached his OneDrive, found a document in the trash folder with his wallet credentials, and took about 3 million tokens, roughly $24 million at the time. • They never touched his phone. They bought one phone number, from one employee. • The fix: take your phone number out of the login chain. For your email, your bank and anything that holds money, switch two-step verification from text messages to an authenticator app, or better, a passkey or a physical security key. Full story (12 min): "They Stole $24 Million Without Touching His Phone" on this channel. Sources • U.S. District Court, C.D. Cal., Terpin v. AT&T Mobility, No. 2:18-cv-06975-ODW-KS, order of March 28, 2023 (Doc. 243). • FBI IC3 PSA220208, SIM swap schemes: https://www.ic3.gov/PSA/2022/PSA220208 Have you ever lost signal for no reason, and wondered? 👇 ⚡ Wiredeep — the tech you use every day, explained in under a minute. 👉 Follow for more! #simswap #cybersecurity #2fa