Cyber Risks · Krebs on Security

Two Charged in SIM Swapping, Vishing Scams

Summary: Jordan K. Milleson, 21, of Timonium, Maryland, and Kyell A. Bryan, 19, of Kingston, Pennsylvania, face identity theft and conspiracy charges for allegedly using vishing and SIM swapping to hijack bitcoin and social media accounts. Prosecutors say the two set up phishing sites mimicking wireless provider employee portals, used phished access to reassign victims' phone numbers to SIM cards they controlled, and that Bryan later placed a swatting call to Baltimore County Police on June 26, 2019, falsely reporting a shooting at Milleson's home.

Key Takeaway: Control of a phone number was enough to reset the email, social media and cryptocurrency accounts tied to it, and the indictment ties the pair to OGusers, where a message under the nickname Champagne sought a phishing site mimicking T-Mobile's employee login page.

Read the original at Krebs on Security ↗

Topics
Phishing & Social Engineering
Related