News for hackers. Stuff that matters.
Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by tomhallett on Friday August 20, 2021 @05:07PM (#28251417)
I had someone contact me on Facebook marketplace, we agreed upon a time/price and then they asked for my phone number (which I sadly gave them). Then they said "I'm going to text you a code, so I can verify you are legit". The text I got was from Google Voice's 2FA.....
Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by TomVDB on Friday August 20, 2021 @05:34PM (#28251679)
This is very common scam. AFAIK it’s a way to create a new Google Voice account (linked to your phone number) with the goal of using that account for other scams so that they can’t be tracked.

I fell for it, but since I already had a Google Voice account linked to that phone number, it didn’t work for the scammer. But he didn’t realize what it didn’t work.

I quickly realized that something wasn’t right (and Googled the mechanics of the scam) and then was able to waste his time for another 30min.

The reason I fell for it was because they use a text message from Google in some African language, so I didn’t immediately realize what was going on. Still dumb to not pay more attention…

But it taught me to not list my phone number in the open on Craigslist.

Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by WolfRazu on Friday August 20, 2021 @06:18PM (#28252035)
That foreign language thing is genius. I've never heard of that before.
Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by voakbasda on Saturday August 21, 2021 @03:16AM (#28254952)
I get these texts periodically. I feed them fake codes and waste as much of their time as possible.

When they figure it out, I receive threats ranging from reporting me to the authorities all the way up to killing me and raping my family.

I then point out exactly how their scam works, and that they are either criminals directly or working for them as patsies. At this point, they usually stop responding.

If they don’t, then I take the chance to vent some of my own vitriol at them. It’s usually therapeutic, but it’s always fun.

I have accumulated a lot of hobbies over the years, and I count this among them.

Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by skinkestek on Saturday August 21, 2021 @03:55AM (#28255082)
I used to get some tech support scams but I think either that scam is dwindling or I've got blacklisted somehow.

Those "3rd line specialists" can get really angry when they realize the unsecure but rich old man they are talking to is far beyond them in tech and have been having fun and recording them ;-)

Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by optymizer on Friday August 20, 2021 @05:33PM (#28251663)
How would someone use that code to hack into my GV account? Wouldn't they also need to know my password or have access to my e-mail account to login or to reset your password?
Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by teraflop on Friday August 20, 2021 @05:40PM (#28251717)
Because OP specifically mentioned Google Voice, my guess is that it was a phone number "ownership" code, rather than a 2FA code per se.

The attacker was probably trying to create a new Google Voice account forwarding to OP's phone number. They could then use the new GV account as its own "legitimate" phone number in order to engage in other scams.

(Alternatively, OP's password might have already been compromised, and this was the last stage of a targeted attack by someone trying to get into their account.)

Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by TomVDB on Friday August 20, 2021 @05:35PM (#28251685)
They don’t.

They want to link a new GV account to a real phone number that is not theirs, so that they can use the GV number for other scams.

It only works when your phone number doesn’t already have a GV linked to it.

Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by bagels on Friday August 20, 2021 @06:15PM (#28252009)
Wouldn't the victim have to send the code back to the scammer for it all to work?
Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by avidiax on Friday August 20, 2021 @08:35PM (#28252969)
Hey! I want to buy your used Ikea furniture!

Just a quick safety precaution to make sure: I'm going to text you a code, can you just send it back to me to confirm?

Thanks!

Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by fastball on Friday August 20, 2021 @11:10PM (#28253799)
Seems easier to just buy a SIM card for cash, no?
Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by Jolter on Friday August 20, 2021 @05:48PM (#28251791)
I don’t use GV, but presumably if they can make Google send you an auth SMS then they have already input your password. I’m guessing it was leaked in some big password leak, and not phished at an earlier time.
Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by shkkmo on Friday August 20, 2021 @06:19PM (#28252037)
The last time I posted something on craigslist for sale, the majority of responses were trying to get me to send them 2fa codes.
Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by davidbiehl on Friday August 20, 2021 @11:45PM (#28254003)
this happened to me the other day for an item i was selling. at the first mention of a “code”, i told them first come first served and i have other people interested. that ended the conversation.
Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by wil421 on Friday August 20, 2021 @06:41PM (#28252208)
This happened to my mother in law but luckily she was wise to the scam. She said the reply was almost immediately.
Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by FrameworkFred on Friday August 20, 2021 @05:36PM (#28251693)
oh dang...good to know