: derayderay (deray@thisisthemovement.org)
I was hacked today: my Twitter account, two email addresses, & my phone. It was not due to passwords, they hacked my phone account itself.
-
By calling
@verizon and successfully changing my phone's SIM, the hacker bypassed two-factor verification which I have on all accounts.
Today I learned that it is rather easy for someone to call the provider & change your SIM. The hacker got the account verification texts.
-
-
I'd realized that my phone had been hacked & separated from the actual phone number when the web only routed here:pic.twitter.com/zwYygVfbYy
-
The staff from
@twitter were incredibly helpful once alerted and helped to both delete some of the hacked tweets and give me back access. -
Verizon recorded the call made this morning by the imposter and we are working with lawyers to get the recording. It's been a long day.
-
No, I do not endorse Trump as the next President. He cannot be the President of the United States. He is racist & a bigot, unfit to lead.
-
The hacker got access by changing my SIM which redirected texts, then resetting my passwords to trigger two-factor authentication. Intense.
-
are you gonna take any action against your cell provider...that's a huge lapse in security
End of conversation
New conversation -
-
-
You can add extra authentication code to a cellular account, but if they know your SSN they can override it.
@derayhttps://twitter.com/swiftonsecurity/status/720372738062299137 … -
Fortunately for
@deray, teleco's have special silos they can enroll VIP customers in where only special agents can view/modify account. -
in thinking about certain recent harassment campaigns I wish there were some opt in security features for regular folks
-
there are but agents often ignore them either by accident or persuasion
End of conversation
New conversation -
-
-
how the person know your social? Cuz with AT&T they ask for the last four numbers if your social before doing anything
-
because social is a stupid identifier. It's in hundreds of databases.
End of conversation
New conversation -
-
-
@SwiftOnSecurity this is why I wish more accounts used authenticator style OTP instead of SMS.Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
too bad they don't support the FreeOTP standard for two factor authentication. If they did, things like that couldn't happen
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Wow. I'm so sorry to hear about this Deray. Thanks for the information though, it may be important.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@siracusa On the plus side, they're probably saving you from all those terrible telemarketing calls.Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@headhntr wtf The operator wants your passcode to access your account info That's SOPThanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
So they had part of your SSN, got the SIM reset, and further authentication was thru texts? How did they reset Twitter pass?
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.