How 1-Time Passcodes Became a Corporate Liability

Phishers are enjoying remarkable success using text messages to steal remote access credentials and one-time passcodes from employees at some of the world's largest technology companies and customer support firms. A recent spate of SMS phishing attacks from one cybercriminal group has spawned a flurry of breach disclosures from affected companies, which are all struggling to combat the same lingering security threat: The ability of scammers to interact directly with employees through their mobile devices.

0ktapus cloudflare corporate data breaches digitalocean doordash group-ib klaviyo liability mailchimp matthew prince security keys security tools signal teleperformance t-mobile twilio twitter web fraud 2.0