SIM Hijacking Spree Ravages 40 Cryptocurrency Traders, Over $5M Stolen |

A short sequence of cyber assaults just lately led to the theft of an astoundingly great amount of cryptocurrency. The perpetrator, Joel Ortiz, broke into his victims’ cryptocurrency accounts and withdrew funds. He additionally used their social media accounts to make threats and demand Bitcoin funds. Ortiz was arrested when one among his victims reported the assault. By then, Ortiz had stolen from simply 40 victims however had obtained over $5 million {dollars}.

The assaults concerned SIM hijacking, a type of id theft. The hijacker pretends to be their sufferer, then contacts the sufferer’s cellular phone supplier and asks for a brand new SIM card. Primarily, the hijacker redirects the sufferer’s incoming telephone calls and texts to the SIM card they only obtained.

Since many accounts use telephone numbers to reset passwords, this method permits the hijackers to realize entry to varied accounts. On this case:

“Ortiz took management of the entrepreneur’s cellphone quantity, reset Gmail password after which gained entry to his cryptocurrency accounts. The entrepreneur ran to the AT&T retailer to get his quantity again, but it surely was too late.”

Vice’s Motherboard broke the story and known as it “the primary reported crime of its sort.” The story has gone viral, however in precise truth, SIM hijacking has been used to steal crypto earlier than.

Final fall, the New York Instances reported a theft of $1500 value of crypto on this method. Across the identical time, a Medium blogger claimed to have misplaced $9000 on this means. Nonetheless, this time, the sum of cash is actually larger: Ortiz focused outstanding crypto buyers.

By some reviews, SIM hijacking has been on the rise since 2013. Till just lately, SIM hijackers normally focused financial institution accounts and PayPal accounts. Now, crypto exchanges and on-line wallets present a chance to maneuver giant quantities of funds. Social media accounts are additionally stolen: Ortiz had beforehand used the approach to hijack social media accounts and promote them for crypto.

The safety measure which enabled these assaults—that's, the observe of utilizing telephone numbers to ship verification codes and reset passwords—has been extensively condemned. Many higher alternate options exist, however in the end it's as much as every website to help these strategies, and none are widespread.

Centralized exchanges and wallets, which the attacker withdrew cash from, are the opposite weak hyperlink. These websites are susceptible to giant scale assaults in addition to small-scale assaults like this one. In the long run, there is no such thing as a substitute for chilly storage.

The submit SIM Hijacking Spree Ravages 40 Cryptocurrency Traders, Over $5M Stolen appeared first on UNHASHED.