Kroll employee falls victim to SIM swapping attack

Share post:

A Kroll employee fell victim to a SIM swapping attack on August 19, 2023. The attacker was able to convince T-Mobile to transfer the employee’s phone number to their own phone, which gave them access to certain files containing personal information of bankruptcy claimants in the matters of BlockFi, FTX, and Genesis.

SIM swapping is a type of fraud in which the attacker tricks a mobile carrier into transferring a victim’s phone number to a SIM card that they control. This allows the attacker to intercept SMS messages and voice calls, and to receive multi-factor authentication (MFA) codes that are used to secure online accounts.

In this case, the attacker was able to obtain enough personal information about the Kroll employee to convince T-Mobile to transfer the phone number.

Kroll acted quickly to secure the stolen accounts and promptly alerted impacted users through email. While the inquiry is ongoing, it has so far yielded no signs of larger system or account breach.

This announcement comes on the heels of Blockchain Capital co-founder Bart Stephens launching a lawsuit against an unidentified hacker who allegedly planned a SIM swapping assault, resulting in the theft of $6.3 million in cryptocurrencies.

The sources for this piece include an article in TheHackerNews.

Featured Tech Jobs


Related articles

Cyber Security Today, April 24, 2024 – Good news/bad news in Mandiant report, UnitedHealth admits paying a ransomware gang, and more

This episode reports on the danger of using expired open-source packages, a tool used by a Russian hacking group and passw

Google Play introduces new biometric verification with a user warning

Google has recently announced updates to the biometric verification process for Google Play purchases, aiming to bolster security...

Cyber Security Today, Week in Review for week ending Friday April 19, 2024

On this episode Jen Ellis, co-chair of the Ransomware Task Force, talks about ways of fighting one of the biggest cyber threats to IT d

Cyber Security Today, April 19, 2024 – Police bust phishing rental platform, a nine-year old virus found on Ukrainian computers, and more

This episode reports on a threat actor targeting governments in the Middle East with a novel way of hiding malware is going international

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways