SEC: SIM Swapping Attack Led to Twitter Account Compromise

Two weeks after its Twitter account was compromised, the SEC has confirmed that the threat actors behind the hack were likely able to obtain control of the cell phone number associated with the SEC account through a SIM swapping attack.

Attackers use SIM swapping to transfer phone numbers to another device without authorization, allowing them to receive voice and SMS communications associated with that number and effectively enabling them to reset passwords or bypass two-factor authentication (if targets rely on …

account account compromise attack attackers cell phone compromise compromised control device hack led numbers phone phone number phone numbers sec sim sim swapping sim swapping attack threat threat actors transfer twitter