<div class="coinjournal">
 <ul>
 <li dir="ltr">SEC says hacker that compromised its X account used a “SIM swap” attack.</li>
 <li dir="ltr">The unauthorised access had seen the hacker publish a fake spot Bitcoin ETFs approval announcement.</li>
 <li dir="ltr">Investigations into the breach are ongoing, but SEC says its 2FA feature had been disabled at the time of the compromise.</li>
 </ul>
 The US Securities and Exchange Commission (<a rel="noopener noreferrer nofollow" title="SEC" href="https://thebittimes.com/tag/sec.html">SEC</a>) has confirmed that the hack on the agency’s X <a rel="noopener noreferrer nofollow" title="account" href="https://thebittimes.com/tag/account.html">account</a>, and the resulting “fake approval” of spot <a rel="noopener noreferrer nofollow" title="Bitcoin ETF" href="https://thebittimes.com/tag/bitcoin-etf.html">Bitcoin ETF</a>s, <a rel="noopener noreferrer nofollow" title="happened" href="https://thebittimes.com/tag/happened.html">happened</a> after an apparent “SIM swap.”
 According to the SEC, the attacker used a cell phone number linked to the agency’s X account. The unauthorised entity accessed the phone number via a telecom carrier the SEC uses, and not from the regulator’s system.
 However, the SEC notes that at the time of the hack, two factor authentication (2FA) for the social media account was disabled. In a press release, the SEC said 2FA for its X account had been disabled since July 2023.
 “While multi-factor authentication (MFA) had previously been enabled on the @SECGov X account, it was disabled by X Support, at the staff’s request, in July 2023 due to issues accessing the account. Once access was reestablished, MFA remained disabled until staff reenabled it after the account was compromised on January 9. MFA currently is enabled for all SEC social media accounts that offer it,” the SEC said in an update published on Monday.
 <h2 dir="ltr" id="multi-agency-investigation-ongoing">Multi-agency investigation ongoing</h2>
 The unauthorised access to SEC’s X account on January 9, 2024 drew widespread criticism and condemnation, with calls for investigation as observers pointed to potential market manipulation. The false approval saw Bitcoin’s price swing sharply – rising to highs of $49k before paring all gains within minutes.
 While the SEC officially approved the spot Bitcoin ETFs on January 10 and trading commenced on January 11, an investigation involving various regulatory and law enforcement agencies is ongoing.
 In its latest press update on the incident, the <a rel="noopener noreferrer nofollow" title="SEC" href="https://thebittimes.com/tag/sec.html">SEC</a> and its staff continue to cooperate with the FBI, Homeland Security’s Cyber<a rel="noopener noreferrer nofollow" title="SEC" href="https://thebittimes.com/tag/sec.html">SEC</a>urity and Infrastructure Security Agency, the Commodity Futures Trading Commission (CFTC), the Department of Justice (DoJ), and the <a rel="noopener noreferrer nofollow" title="SEC" href="https://thebittimes.com/tag/sec.html">SEC</a>’s own Division of Enforcement.
</div>
Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/sec-confirms-x-account-hack-happened-after-a-sim-swap-tbt77377.html">https://thebittimes.com/sec-confirms-x-account-hack-happened-after-a-sim-swap-tbt77377.html</a>

SEC confirms X account hack happened after a “SIM swap”

Table of Contents

TheBitTimes

Other articles published on Jan 23, 2024

Best Crypto to Buy Now January 22 – Mantle, Render, Gnosis

Bitcoin Price Retreats to Recent Lows Amid Market Developments

Coinbase Stock Dips 5% As JPMorgan Takes Bearish Stance On Bitcoin ETFs

Cointelegraph, others sent phishing emails in presumed hack

India’s Union Budget 2024: When And Where To Watch

How Kaspa (KAS) & Injective (INJ) investors escaped the daily rat race with presales. Why is Kele...

Join our free newsletter for daily crypto updates!