PSA: I was hacked (3k USD + private data). Apple ID 2FA was bypassed.
Avoid SMS 2FA. Avoid iCloud. Avoid hot keys. Rotate your passwords.
I wrote a detailed post on what, when & how this happened. Investigation is still in progress
Stay safe!
Conversation
HN discussion:
news.ycombinator.com/item?id=248852
1
1
Do you have Continuity enabled? Seems like a sim clone, ss7 or other form of intercept by an app on your phone or on your computer (if your computer has access to your sms).
1
1
Replying to
Are you sure you got 100% of the messages? It could be back and forth with you getting some and then getting some but SIM clone is least likely IMO. One other potential vector is the telco. Could be sms forwarding enabled by them/rogue employee.

