He Thought He Was Secure; His Phone Number Got Stolen Anyway

This article details a real-world incident where cybersecurity expert Torsten George was targeted by a SIM swap attack, highlighting the vulnerability of relying solely on one-time passwords (OTPs) for security. The attacker, potentially linked to groups like Scattered Spider and Shinyhunters, gained access to George’s account by impersonating an AT&T representative and exploiting a SIM swap to intercept his OTP. The incident underscores the rising threat of SIM swapping and the need for layered security measures, including multifactor authentication and proactive risk assessments by both users and organizations.