The United States Securities and Exchange Commission (SEC) claims that it was a victim of “SIM swapping” when its account on the social media platform X, formerly known as Twitter, was hacked earlier this month, prior to the approval of the multiple spot Bitcoin exchange-traded funds (ETFs).
“SIM swapping” is a technique internet <a href="https://thecoinrise.com/secs-x-account-hacked-to-post-false-spot-bitcoin-etf-approval/" rel="noopener noreferrer nofollow">fraudsters use to seize control of telephone lines</a>. In this way, attackers gain control of a telephone number by having it reassigned to a new device.
<h2 id="span-style-font-weight-400-sec-had-multifactor-authentication-enabled-span">SEC had Multifactor Authentication Enabled</h2>
The SEC <a href="https://www.sec.gov/secgov-x-account" rel="noopener noreferrer nofollow">claims</a> to have had multifactor authentication enabled six months before the hack, but X Support disabled it at the request of an SEC staff member. This hacking led to the false X post on January 9 stating that spot Bitcoin exchange-traded funds (ETFs) had been approved.
Multifactor authentication is an additional layer of protection due to issues accessing the account. The security measure was not restored until after the January 9 attack.
<h3 id="span-style-font-weight-400-approval-on-january-10-span">Approval on January 10</h3>
The following day, January 10, the SEC formally authorized a number of spot Bitcoin ETF applications, the majority of which started trading on January 11.
The regulator <a href="https://thecoinrise.com/us-sec-grants-official-approval-for-a-spot-bitcoin-etf/" rel="noopener noreferrer nofollow">approved the 19b-4 applications from prominent entities</a> like VanEck (HODL), Valkyrie (BRRR), Grayscale Investments ($GBTC), WisdomTree (BTCW), Invesco Galaxy (BTCO), <a href="https://thecoinrise.com/blackrock-fidelity-takes-early-spot-bitcoin-etfs-lead/" rel="noopener noreferrer nofollow">BlackRock Inc. (IBIT), Fidelity Investments (FBTC), Bitwise (BITB)</a>, Hashdex (DEFI), ARK 21shares (ARKB), and Franklin Templeton (EZBC).&nbsp;&nbsp;
<h2 id="span-style-font-weight-400-sec-cell-phone-hacked-span">SEC Cell Phone Hacked</h2>
The SEC determined that the unauthorized party obtained control of the agency’s cell phone number associated with the X account in an apparent ‘SIM swap’ attack two days after the incident, in consultation with the regulator’s telecom carrier.
“Once in control of the phone number, the unauthorized party reset the password for the @SECGov account,” an SEC spokeswoman explained.
<h3 id="span-style-font-weight-400-ongoing-investigation-span">Ongoing Investigation</h3>
An investigation to find out how the unauthorized party got the carrier to change the SIM for the account and how the attacker knew which phone number was associated with the agency’s X account has been opened as well.
The post <a href="https://thecoinrise.com/sec-says-it-was-victim-of-a-sim-swap-hack-details/" rel="noopener noreferrer nofollow">SEC Says It Was Victim of a ‘SIM Swap’ Hack: Details</a> appeared first on <a href="https://thecoinrise.com" rel="noopener noreferrer nofollow">Latest News and Insights on Blockchain, Cryptocurrency, and Investing</a>.

SEC Says It Was Victim of a ‘SIM Swap’ Hack: Details

Table of Contents

TheCoinrise Media

Other articles published on Jan 23, 2024

Unlocking the Current Ecological Trends in NFT with NFTScan

UMA’s Remarkable Surge Amidst Market Turbulence

Congresswoman Maxine Waters Criticizes Meta and Its Prolonged Crypto Ventures

TIA Crypto Price is at Make or Break Zone of $15; What’s Next?

Institutional crypto products record $21M in outflows last week

XRP Investors on Alert as XRP Price History Signals Stormy February Ahead

Join our free newsletter for daily crypto updates!