Read

<div class="cryptonews">
 <p class="is-style-lead">Users of Friend.tech — a decentralized social network — have recently been targeted by numerous hacker attacks.</p>
 <p>Jason Janowitz — founder of crypto news outlet Blockworks — described in an Oct. 8 tweet how someone tried to hijack his Friend.tech account.</p>
 <p>At first he received a message that posed as coming from Friend.tech’s automated assistance, pretending that the number associated with the account was being changed.</p>
 <blockquote class="wp-block-quote">
  <p>“A number change has been requested for this account. Reply with YES to appprove this change, or NO to decline. If we do not receive a response within 2 hours, the change will proceed as requested.”</p>
 </blockquote>
 <p>The message is meant to cause someone to believe that a bad actor is trying to access his account and that he can prevent access by answering “no” to the message. What should make victims suspicious is that such a system is rather unlikely to automatically approve changes to the account if the user does not confirm the request.</p>
 <p>After Janowitz answered “no” to the message, the hackers attempted to gain access to his account by requesting a two-factor authentication code as confirmation for the refusal to change the number. This message was then followed by a <a rel="noopener noreferrer nofollow" title="verification" href="https://thebittimes.com/tag/verification.html">verification</a> code sent to the user’s cellphone number after being requested by the hackers.</p>
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">Someone is trying to hack my @friendtech <br><br>1) Text sent saying they’re changing my number <br><br>2) I respond no<br><br>3) They say to confirm no, send the <a rel="noopener noreferrer nofollow" title="verification" href="https://thebittimes.com/tag/verification.html">verification</a> code <br><br>4) Receive actual <a rel="noopener noreferrer nofollow" title="verification" href="https://thebittimes.com/tag/verification.html">verification</a> code from friend tech<br><br>5) After no response, they text again saying they’ll auto… pic.twitter.com/j76vI969jP</p>— Yano (@JasonYanowitz) October 8, 2023
   </blockquote>
  </div>
 </figure>
 <p>The logic behind Friend.tech asking for confirmation via a text message (to verify you can receive their texts) is flawed, as you wouldn’t be able to read their message in the first place if you didn’t have access to those texts.</p>
 <p>Still, it is entirely plausible that a user scared that his account is about to be compromised could act impulsively and fall for the scam, Janowitz claimed.</p>
 <blockquote class="wp-block-quote">
  <p>“Simple but effective method. Sharing here so others don’t fall for it.”</p> <cite>Jason Janowitz</cite>
 </blockquote>
 <p>Janowitz’s tweet comes after recent reports that scammers have stolen over $385,000 in Ether from Friend.tech <a rel="noopener noreferrer nofollow" title="users" href="https://thebittimes.com/tag/users.html">users</a> through SIM-swapping.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> What is Friend.tech, social platform earning over $1m in fees
 </div>
 <p>SIM-swapping, also known as SIM hijacking, is a type of account takeover where hackers are able to transfer the victim’s phone number to a SIM card controlled by the attackers. Once they have your number, they can often reset account passwords and bypass two-factor authentication.</p>
 <p>On Oct. 5, Friend.tech announced new account security <a rel="noopener noreferrer nofollow" title="Category Features" href="https://thebittimes.com/features.html">Features</a> to help <a rel="noopener noreferrer nofollow" title="users" href="https://thebittimes.com/tag/users.html">users</a> protect themselves, including the ability to add and remove login methods. This followed user complaints that the platform’s 2FA passcode feature had inadvertently locked people out when their phone numbers were swapped.</p>
 <p>According to blockchain investigator ZachXBT, a number of SIM-swap attacks targeting Friend.tech <a rel="noopener noreferrer nofollow" title="users" href="https://thebittimes.com/tag/users.html">users</a> occurred on Oct. 4. Victims reported having their accounts compromised even after taking precautions like enabling two-factor authentication.</p>
 <p>While hackers continue to refine their techniques, experts advise all Friend.tech users to be vigilant about enabling extra login protections and not trusting unsolicited requests to share verification codes.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> Read more: </span> Friend.tech announces new features following SIM-swapping attack
 </div> <span class="google-news-banner__label">Follow Us on Google News</span>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/hackers-target-friend-tech-users-with-cunning-verification-scam-tbt65656.html">https://thebittimes.com/hackers-target-friend-tech-users-with-cunning-verification-scam-tbt65656.html</a></p>

Hackers target Friend.tech users with cunning verification scam

TheBitTimes

Other articles published on Oct 9, 2023

Bitstamp in talks with three EU banks to offer crypto services

🚨 A new DAO vote is underway 🚨

Bancor's 71% Price Surge Fuels Excitement Amongst Crypto Enthusiasts

Here’s Why Crypto Prices Are Bearish in October, Traders Divest Into These 3 New Cryptocurrencies

Ethereum Price Prediction as $1,800 Level Comes into Play – What Are the Indicators Showing?

UK data watchdog warns Snapchat about risks associated with AI chatbots

Join our free newsletter for daily crypto updates!