Hackers Claim They Breached T-Mobile More Than 100 Times in 2022
Summary: Three cybercriminal SIM-swapping groups claimed access to T-Mobile's internal networks on 104 separate days in the last seven-and-a-half months of 2022, phoning employees with fake IT-department pretexts to harvest credentials from phishing pages. The groups advertised each claimed intrusion on Telegram with "Tmo up!" posts, priced T-Mobile SIM-swaps at $1,000 to $1,500, and one group's "Tmo down!" notices showed its claimed access often lasted under 15 minutes by November and December 2022.
What's compelling: T-Mobile declined to confirm or deny the claimed intrusions, and with more than 71,000 U.S. employees, any one of them can be the target of a voice-phishing call that hands over access to tools used to divert a customer's text messages and calls.
Read the original at Krebs on Security ↗
- Topics
- Identity & Access Management
- Related
- FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’ Cyber Risks · Nov 13, 2026Connect Wise Cloud Backup application abused in cross-tenant token sweep Cyber Risks · Oct 19, 2026Sponsored: Specter Ops on the impact of AI agents on Blood Hound Cyber Risks · Sep 20, 2026