I had opportunity to watch a short video on 2fa hacking that bad guys are using for social engineering on people.
I will pick on Amazon as it could be any site with 2fa (two factor authentication) being used.
The bad guy sends a text to your cell saying here is a 2fa code to verify your amazon sign in
5 minutes later another text with different 2fa code
5 minutes later repeat
5 minutes later repeat
5 minutes later repeat
Then the final text comes from "Amazon" (bad guy) saying you have had 5 two factor authentications fail at Amazon, have you shared your username/password with anyone? If not please change your username/password here to prevent unauthorized use of your account. Text will have a link to bad guys Amazon spoof site.
The bad guys are really clever. I'm impressed.
I will pick on Amazon as it could be any site with 2fa (two factor authentication) being used.
The bad guy sends a text to your cell saying here is a 2fa code to verify your amazon sign in
5 minutes later another text with different 2fa code
5 minutes later repeat
5 minutes later repeat
5 minutes later repeat
Then the final text comes from "Amazon" (bad guy) saying you have had 5 two factor authentications fail at Amazon, have you shared your username/password with anyone? If not please change your username/password here to prevent unauthorized use of your account. Text will have a link to bad guys Amazon spoof site.
The bad guys are really clever. I'm impressed.
Comment