News for hackers. Stuff that matters.

A comment on Thieves drain 2FA-protected bank accounts by abusing SS7 routing protocol. Parent comment

Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ... by adrr on Thursday May 04, 2017 @02:42PM (#14267520)
It's one time use. Even they did intercept it they would have it use before the person.
[ Parent | on HN ]
Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ... by MertsA on Thursday May 04, 2017 @08:52PM (#14270308)
That's not the scenario. If I want into your account and I only have the password I don't wait for you to try to log in, I just try to log in and sniff the message to "prove" that I have the phone.
[ Parent | on HN ]
Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ... by c22 on Thursday May 04, 2017 @08:17PM (#14270118)
Easy enough if they requested it.
[ Parent | on HN ]