Read

Users of Friend.tech — a decentralized social network — have recently been targeted by numerous hacker attacks.
Jason Janowitz — founder of crypto news outlet Blockworks — described in an Oct. 8 <a href="https://twitter.com/jasonyanowitz/status/1711120440905683211" target="_blank" rel="noopener noreferrer nofollow">tweet</a> how someone tried to hijack his Friend.tech account.
At first he received a message that posed as coming from Friend.tech’s automated assistance, pretending that the number associated with the account was being changed.
<blockquote class="wp-block-quote">
 “A number change has been requested for this account. Reply with YES to appprove this change, or NO to decline. If we do not receive a response within 2 hours, the change will proceed as requested.”
</blockquote>
The message is meant to cause someone to believe that a bad actor is trying to access his account and that he can prevent access by answering “no” to the message. What should make victims suspicious is that such a system is rather unlikely to automatically approve changes to the account if the user does not confirm the request.
After Janowitz answered “no” to the message, the hackers attempted to gain access to his account by requesting a two-factor authentication code as confirmation for the refusal to change the number. This message was then followed by a verification code sent to the user’s cellphone number after being requested by the hackers.
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 Someone is trying to hack my <a href="https://twitter.com/friendtech?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">@friendtech</a> 1) Text sent saying they’re changing my number 2) I respond no 3) They say to confirm no, send the verification code 4) Receive actual verification code from friend tech 5) After no response, they text again saying they’ll auto… <a href="https://t.co/j76vI969jP" target="_blank" rel="noopener noreferrer nofollow">pic.twitter.com/j76vI969jP</a>— Yano 🟪 (@JasonYanowitz) <a href="https://twitter.com/JasonYanowitz/status/1711120440905683211?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">October 8, 2023</a>
 </blockquote>
 <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
The logic behind Friend.tech asking for confirmation via a text message (to verify you can receive their texts) is flawed, as you wouldn’t be able to read their message in the first place if you didn’t have access to those texts.
Still, it is entirely plausible that a user scared that his account is about to be compromised could act impulsively and fall for the scam, Janowitz claimed.
<blockquote class="wp-block-quote">
 “Simple but effective method. Sharing here so others don’t fall for it.” <cite>Jason Janowitz</cite>
</blockquote>
Janowitz’s tweet comes after recent <a href="https://crypto.news/friend-tech-targeted-by-phishing-scam-as-its-volumes-grow/" rel="noopener noreferrer nofollow">reports</a> that scammers have stolen over $385,000 in Ether from Friend.tech users through SIM-swapping.
You might also like: <a href="https://crypto.news/what-is-friend-tech-social-platform-earning-over-1m-in-fees/" rel="noopener noreferrer nofollow"> What is Friend.tech, social platform earning over $1m in fees </a>
SIM-swapping, also known as SIM hijacking, is a type of account takeover where hackers are able to transfer the victim’s phone number to a SIM card controlled by the attackers. Once they have your number, they can often reset account passwords and bypass two-factor authentication.
On Oct. 5, Friend.tech announced new account security features to help users protect themselves, including the ability to add and remove login methods. This followed user complaints that the platform’s 2FA passcode feature had inadvertently locked people out when their phone numbers were swapped.
According to blockchain investigator ZachXBT, a number of SIM-swap attacks targeting Friend.tech users occurred on Oct. 4. Victims reported having their accounts compromised even after taking precautions like enabling two-factor authentication.
While hackers continue to refine their techniques, experts advise all Friend.tech users to be vigilant about enabling extra login protections and not trusting unsolicited requests to share verification codes.
Read more: <a href="https://crypto.news/friend-tech-announces-new-features-following-sim-swapping-attack/" rel="noopener noreferrer nofollow"> Friend.tech announces new features following SIM-swapping attack </a>

Hackers target Friend.tech users with cunning verification scam

crypto.news

Other articles published on Oct 9, 2023

AI in Pet Care: Transforming the Lives of Our Furry Friends

Bitcoin, ADA, and Binance Coin Price Analysis: Will Meme Coins Continue to Decline?

10 Things You Learn When You Study Bitcoin

UK FCA Warns of 143 Unregistered Crypto Firms Operating in the Country!

Caterpillar Stock: Will CAT Stock Price Recover Before Earnings?

Concerns Raised Over Sympathetic Portrayal of SBF Amid Trial

Join our free newsletter for daily crypto updates!