On Monday, the Securities and Exchange Commission (SEC) disclosed that multi-factor authentication (MFA) on its X account was disabled leading up to a false post earlier this month, just before the formal approval of spot Bitcoin ETFs.
The incident occurred on Tuesday, January 9, 2024, when the SEC’s @SECGov X account was compromised, and unauthorized posts regarding the approval of spot Bitcoin exchange-traded funds emerged.
SIM Swap Attack
According to a statement released by an SEC spokesperson on January 22, It was revealed that the unauthorized party gained control of the agency cell phone number associated with the account through a “SIM swap” attack.
This technique allows transferring a person’s phone number to another device without authorization. While the SEC has confirmed that the access to the phone number occurred via the telecom carrier and not its systems, the method and motivation behind the attack are still under investigation.
We can confirm that the account @
We współpracy z: https://cryptopotato.com/sec-reveals-multi-factor-authentication-disabled-before-false-etf-approval-post/
