SIM swapping bypasses SMS-based 2FA.
Attack Process
1. Gather victim information
2. Social engineer carrier
3. Port number to new SIM
4. Intercept SMS codes
5. Access accountsHigh-Profile Victims
- Jack Dorsey (Twitter CEO)
- Cryptocurrency holders
- Influencers and celebritiesProtection
- Set carrier PIN/password
- Use authenticator apps instead of SMS
- Enable carrier account alerts
- Consider number lock services
- Use hardware security keys