🚨 #CoSoSec 🚨
A Hacker Got All My Texts for $16
A gaping flaw in SMS lets hackers take over phone numbers in minutes by simply paying a company to reroute text messages.
https://www.vice.com/en/article/y3g8wb/hacker-got-my-texts-16-dollars-sakari-netnumber
^
"I hadn't been SIM swapped, where hackers trick or bribe telecom employees to port a target's phone number to their own SIM card. Instead, the hacker used a service by a company called Sakari, which helps businesses do SMS marketing and mass messaging, to reroute my messages to him."
^
Here is the monitoring mentioned in the article. I am signing up immediately.
^
OK, I set up an Okeymonitor account. First impressions:
PRO
- Allowed a 128-character password
- Can add multiple Notification Endpoints (I added two emails and Keybase)
CON
- Notification Endpoints can only be Email, Text, Telegram, or Keybase
- No 2FA login option (SERIOUSLY?!?)
That last one honestly pisses me off, given the context of what this organization is all about.