News for hackers. Stuff that matters.

A comment on Scammed out of $130K via fake Google call, spoofed Google email and auth sync. Parent comment

Re:Scammed out of $130K via fake Google call, spoofed Google... by remus on Tuesday September 16, 2025 @01:58PM (#45265565)
They gained access to the Google account by stealing the verification code over the phone, but then they had easy access to other accounts (e.g. coinbase) because they had access to 2FA codes because Google authenticator was backed up to the users Google account.
[ Parent | on HN ]
Re:Scammed out of $130K via fake Google call, spoofed Google... by throwaway7783 on Tuesday September 16, 2025 @02:00PM (#45265595)
Ah, makes sense. The victim was social engineered first.
[ Parent | on HN ]