: derayderay (deray@thisisthemovement.org)
I was hacked today: my Twitter account, two email addresses, & my phone. It was not due to passwords, they hacked my phone account itself.
-
By calling
@verizon and successfully changing my phone's SIM, the hacker bypassed two-factor verification which I have on all accounts.
Today I learned that it is rather easy for someone to call the provider & change your SIM. The hacker got the account verification texts.
-
-
I'd realized that my phone had been hacked & separated from the actual phone number when the web only routed here:pic.twitter.com/zwYygVfbYy
-
The staff from
@twitter were incredibly helpful once alerted and helped to both delete some of the hacked tweets and give me back access. -
Verizon recorded the call made this morning by the imposter and we are working with lawyers to get the recording. It's been a long day.
-
No, I do not endorse Trump as the next President. He cannot be the President of the United States. He is racist & a bigot, unfit to lead.
-
The hacker got access by changing my SIM which redirected texts, then resetting my passwords to trigger two-factor authentication. Intense.
-
social engineering hacking, it's some crazy stuff
End of conversation
New conversation -
-
-
You can add extra authentication code to a cellular account, but if they know your SSN they can override it.
@derayhttps://twitter.com/swiftonsecurity/status/720372738062299137 … -
thanks for sharing SecuriTay, have a great Sunday :)
End of conversation
New conversation -
-
-
how the person know your social? Cuz with AT&T they ask for the last four numbers if your social before doing anything
-
because social is a stupid identifier. It's in hundreds of databases.
End of conversation
New conversation -
-
-
Called Verizon up in the middle of the attack to disable all access to my account; they changed my SIM for the attacker anyway.
-
Let's get you some extra protection. I can help. Do you need any further assistance for you to have account access? ^EW
End of conversation
New conversation -
-
-
So they had part of your SSN, got the SIM reset, and further authentication was thru texts? How did they reset Twitter pass?
Thanks. Twitter will use this to make your timeline better. Undo
-
-
-
too bad they don't support the FreeOTP standard for two factor authentication. If they did, things like that couldn't happen
Thanks. Twitter will use this to make your timeline better. Undo
-
-
-
Wow. I'm so sorry to hear about this Deray. Thanks for the information though, it may be important.
Thanks. Twitter will use this to make your timeline better. Undo
-
-
-
@siracusa On the plus side, they're probably saving you from all those terrible telemarketing calls.Thanks. Twitter will use this to make your timeline better. Undo
-
-
-
@headhntr wtf The operator wants your passcode to access your account info That's SOPThanks. Twitter will use this to make your timeline better. Undo
-
-
-
this seems like the sort of thing they should just call the old device to verify. That's some shit security practice for them.
Thanks. Twitter will use this to make your timeline better. Undo
-
-
-
@SwiftOnSecurity Any idea how to get@verizon, or any provider, to better secure an account so this doesn't happen?Thanks. Twitter will use this to make your timeline better. Undo
-
-
-
happened to me in February as well, for someone trying to hack into my Instagram account.
Thanks. Twitter will use this to make your timeline better. Undo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.