Text Messages, Once a Bulwark of Security, Now Seen as Vulnerable
The process, known as 2FA, adds another level of protection to systems by requiring users to verify their identity through more than just a password. Often, this takes the form of a verification code sent by text message—or SMS—or voice calls, but experts warn that these systems are becoming increasingly out of date.
“While using text message authentication is better than nothing, it could give attackers access to the multifactor authentication code that is sent to the victim’s device,” Hank Schless, senior manager of security solutions at cyber company Lookout Inc. said. Hackers can access phones through malware or techniques such as SIM-swapping and wait for sensitive information such as MFA codes to be sent to a number.
Source: Text Messages, Once a Bulwark of Security, Now Seen as Vulnerable