T-Cellular workers from across the nation are reportedly receiving textual content messages providing them money in alternate for swapping SIMs. SIM swapping is when cybercriminals trick a mobile service supplier into switching a sufferer’s service to a SIM card that they management, basically hijacking the sufferer’s cellphone quantity and having access to two-factor authentication codes. From the Cellular Report: The texts supply the worker $300 per SIM swap, and asks the employee to contact them on telegram. The texts all come from a wide range of totally different numbers throughout a number of space codes, making it tougher to dam. The textual content additionally claims they acquired the worker’s quantity “from the T-Mo worker listing.” If true, it might imply T-Cellular’s worker listing, with contact numbers, has someway been accessed. It is also doable the unhealthy actor has reside/present entry to this information, although we contemplate that much less probably as a result of the truth that some impacted persons are former workers who haven’t labored on the firm in months.
Nonetheless, the largest problem right here is how this individual (or a number of folks) obtained the worker cellphone numbers. We’re unsure but which workers are impacted, however based mostly on feedback on-line it appears a minimum of a number of third-party workers are affected, and we have independently confirmed present company workers have additionally obtained the message. Although we won’t say for sure, this probably means the knowledge will not be the identical information as what was leaked through the Connectivity Supply breach [from September]. We won’t, nevertheless, eradicate that risk. As talked about, there are experiences that a few of the contacted persons are former workers, and have not been employed at T-Cellular for months, so the knowledge being acted upon is probably going a number of months previous on the very least. That being stated, we’re fairly assured based mostly on company workers being included that this can be a totally different supply of knowledge getting used.
