#SMSRanger

Researchers have found bots in Telegram that provide fraud support to other criminals and even bypass certain 2FA methods. Categories: Social engineering Tags: 2fa BloodOTPbot Intel 147 one-time password OTP phishing robocall SIM swap SIM swapping SMS Buster SMSRanger telegram bot time-based one-time password totp two-factor authentication *( Read more... ( https://blog.malwarebytes.com/social-engineering/2021/09/telegram-powered-bots-circumvent-2fa/ ) )* The post Telegram-powered bots circumvent 2FA appeared first on Malwarebytes Labs.

In February, KrebsOnSecurity wrote about a novel cybercrime service that helped attackers intercept the one-time passwords (OTPs) that many websites require as a second authentication factor in addition to passwords. That service quickly went offline, but new research reveals a number of competitors have since launched bot-based services that make it relatively easy for crooks to phish OTPs from targets.