Authy 2FA пробив (SIM Swap)

[2GOOD]

Много от вас сигурно са получили подобно съобщение, става въпрос за доста сложна, но ефективна схема за пробиване на 2FA защита. Накратко с помощта на вътрешен човек или заблуждаване на оператор атакуващите се сдобовиат с копие на вашата сим карта, от там вече е пробита Authy защитата както и евентуално google акаунта ви. Докато се усетите че картата ви е сменена Coinbase сметката е опразнена

Dear Coinbase user,

We are notifying you because you currently, or have previously, used the Authy app to protect access to a Coinbase account. Due to a recent increase in sophisticated attacks targeting Coinbase users, we are taking extra precaution to protect your account.

In combination with social engineering and password theft, attackers are porting phone numbers (also known as SIM swapping). Once they fraudulently gain control of a user’s phone number, attackers can add new devices to an existing Authy account and take over access to a linked Coinbase account.

To combat these attacks, we will be automatically disabling the Authy multi-device setting and limiting the ability to use SMS to install Authy.

Here are the steps you need to take:
1. To avoid being locked out of your Coinbase account, please immediately install the Authy app on your current device if you have not already.
2. If you need to install the Authy app on a new device, you will need to re-enable multi-device in the Authy app settings, though we recommend you disable it again after you have finished adding another device.
3. Avoid sharing information regarding Coinbase or other bitcoin activity on social media.
4. If you are still having trouble accessing your Coinbase account, please contact [email protected].
Further reading:
• Understanding the Authy multi-device feature
• How to protect yourself from social engineering
• How to protect yourself from Porting and SIM Swapping


Thanks,

The Authy Team