{"id":2761,"date":"2022-03-30T00:00:00","date_gmt":"2022-03-30T00:00:00","guid":{"rendered":"https:\/\/www.telesign.com\/lapsus-shows-how-sim-swap-attacks-threaten-enterprises-as-much-as-consumers"},"modified":"2023-12-20T02:39:51","modified_gmt":"2023-12-20T02:39:51","slug":"lapsus-sim-swap-attacks","status":"publish","type":"post","link":"https:\/\/www.telesign.com\/es\/blog\/lapsus-sim-swap-attacks","title":{"rendered":"LAPSUS$ shows how SIM-swap attacks threaten enterprises as much as consumers"},"content":{"rendered":"<p>From social media takeovers to million-dollar crypto heists, SIM-swapping has become a mainstream attack vector. About every week another article hits our timelines on how an unsuspecting person became the latest victim. Last year alone, SIM-swap attacks cost Americans more than $68 million, and the number of reported incidents grew by more than 400%. Earlier this year, the <a href=\"https:\/\/www.ic3.gov\/Media\/Y2022\/PSA220208\">FBI issued<\/a> a public service announcement, warning and educating consumers about SIM-swap fraud.<\/p>\n<p>When it comes to SIM-swap attacks, fraudsters have a playbook. They are bounty hunting very select, high-value accounts. Whether it&#8217;s prominent social accounts and celebrities, people who are visibly active in the cryptocurrency space, or gamers who have spent countless hours unlocking achievements and leveling-up-SIM-swappers are deliberate with who and what they target. Despite being low-tech, a successful SIM-swap attack is highly sophisticated and generates high returns.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_85 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"#\" data-href=\"https:\/\/www.telesign.com\/es\/blog\/lapsus-sim-swap-attacks\/#but-what-about-enterprises\" >But what about enterprises?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"#\" data-href=\"https:\/\/www.telesign.com\/es\/blog\/lapsus-sim-swap-attacks\/#how-do-they-gain-access\" >How do they gain access?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"#\" data-href=\"https:\/\/www.telesign.com\/es\/blog\/lapsus-sim-swap-attacks\/#sim-swapping-through-security\" >SIM-swapping through security &nbsp;<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"#\" data-href=\"https:\/\/www.telesign.com\/es\/blog\/lapsus-sim-swap-attacks\/#how-can-you-defend-against-it\" >How can you defend against it?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"#\" data-href=\"https:\/\/www.telesign.com\/es\/blog\/lapsus-sim-swap-attacks\/#detect-sim-swap-activity\" >Detect SIM-swap activity &nbsp;<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"but-what-about-enterprises\"><\/span>But what about enterprises? <span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>With zero-trust security frameworks, virtual private networks, and an arsenal of additional defense tactics, businesses should be immune from low-tech attacks like SIM-swapping.<\/p>\n<p>Unfortunately, that is not the case. As the cybergang LAPSUS$ has proved, SIM-swap attacks threaten enterprises as much as consumers. The gang has dominated <a href=\"https:\/\/www.google.com\/search?q=LAPSUS%24&#038;sxsrf=APq-WBsqcvroO4pMBHHHtiBNQqaHwdKdcA:1648605487145&#038;source=lnms&#038;tbm=nws&#038;sa=X&#038;ved=2ahUKEwiKj76D3uz2AhUYVc0KHe_5ChkQ_AUoAXoECAIQAw&#038;cshid=1648605494170554&#038;biw=984&#038;bih=766&#038;dpr=2\">headlines<\/a> in recent weeks. They&#8217;ve allegedly penetrated internal networks at some of the largest, well-known tech companies in the world. And once they are in, LAPSUS$ accesses data, leaks code, and threatens to share it all if a ransom is not paid.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"how-do-they-gain-access\"><\/span>How do they gain access? <span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Considering the immense resources of the victims, you would think LAPSUS$ deployed a highly-technical attack to bypass multilayer security frameworks-detecting network vulnerabilities, creating backdoors, installing malware, and deploying a denial-of-service attack to gain admin access. But as it turns out, LAPSUS$ deployed many of the same old-fashioned tactics that fraudsters use to hijack one&#8217;s digital wallet.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"sim-swapping-through-security\"><\/span>SIM-swapping through security &nbsp;<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The crux of the SIM-swap is a good target. For consumers, it&#8217;s fame and assets. For an enterprise, it&#8217;s an employee with the right access. That was LAPSUS$&#8217;s strategy. They followed the same tried-and-true SIM-swap playbook: <\/p>\n<ul>\n<li><a href=\"https:\/\/www.telesign.com\/blog\/social-engineering-attacks\">Social engineer<\/a> to gather knowledge about their targets<\/li>\n<li>Steal credentials to trigger MFA prompts<\/li>\n<li><a href=\"https:\/\/www.telesign.com\/blog\/sim-swapping-defense\">SIM-swap<\/a> to intercept OTPs and facilitate <a href=\"https:\/\/www.telesign.com\/blog\/account-takeover\">account takeover<\/a><\/li>\n<\/ul>\n<p>Despite being low-tech, LAPSUS$&#8217;s series of attacks are elaborate, sophisticated, and successful. They are exploiting an enterprise&#8217;s weakest security link-their people, their employees, and their partners. After all, 95% of cybersecurity breaches are caused by humans.<\/p>\n<p>LAPSUS$&#8217; social engineering and SIM-swapping playbook should have every security team on notice. While conventional attack vectors-like email phishing and malware-will always be top of mind, LAPSUS$ has proven these low-priority tactics pose significant risks.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"how-can-you-defend-against-it\"><\/span>How can you defend against it? <span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>It all starts with education. You should train your employees to practice good security hygiene and to always be skeptical. But even with the most cautious employees, the strongest of passwords, and multifactor authentication-every employee is at risk.<\/p>\n<p>Whether it&#8217;s LAPSUS$ targeting your employees or fraudsters going after your bank account, personable identifiable information will be shared, passwords will be stolen, and one-time passcodes will be intercepted.<\/p>\n<p>There is a reason <a href=\"https:\/\/www.computerweekly.com\/news\/252476811\/Four-fifths-of-SIM-swap-fraud-attempts-succeed\">80% of SIM-swap attacks are successful<\/a>. Once a fraudster has successfully ported a phone number over to their SIM card, there is nothing an end-user can do. The fraudster is one text message, six digits, and a few seconds away from taking over the account.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"detect-sim-swap-activity\"><\/span>Detect SIM-swap activity &nbsp;<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>As the leading authentication and digital identity player, Telesign serves as the last line of defense. Before you send a one-time passcode (OTP) for your final authentication, Telesign can instantly detect if and when a phone number was SIM-swapped or ported.<\/p>\n<p>Using a dynamic risk assessment, you can understand fraudulent intent and prevent OTPs from being delivered to unwanted bad actors. In 2021, the FBI received 1,611 SIM-swapping complaints. During that same time, Telesign&#8217;s SIM swap monitoring blocked more than 1 billion account takeover attempts. &nbsp;<\/p>\n<p>Despite being a low-tech, old-school attack, SIM-swap attacks are growing, and they are here to stay-just as Telesign CEO Joe Burton predicted in his <a href=\"https:\/\/www.telesign.com\/blog\/2022-digital-security-predictions\">2022 digital security predictions<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>From social media takeovers to million-dollar crypto heists, SIM-swapping has become a mainstream attack vector. About every week another article hits our timelines on how an unsuspecting person became the latest victim. Last year alone, SIM-swap attacks cost Americans more than $68 million, and the number of reported incidents grew by more than 400%. Earlier<\/p>\n","protected":false},"author":4,"featured_media":3120,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[66],"tags":[176,172,308],"class_list":["post-2761","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-industry-insight","tag-ato","tag-sim-swap","tag-social-engineering"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>LAPSUS$ shows how SIM-swap attacks threaten enterprises as much as consumers - Telesign<\/title>\n<meta name=\"description\" content=\"A recent Lapsus SIM-swap attack shows how the process unfolds for all parties. Learn more here.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.telesign.com\/es\/blog\/lapsus-sim-swap-attacks\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"LAPSUS$ shows how SIM-swap attacks threaten enterprises as much as consumers - Telesign\" \/>\n<meta property=\"og:description\" content=\"A recent Lapsus SIM-swap attack shows how the process unfolds for all parties. Learn more here.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.telesign.com\/es\/blog\/lapsus-sim-swap-attacks\" \/>\n<meta property=\"og:site_name\" content=\"Telesign\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/TelesignCorp\/?utm_source=telesign.com\" \/>\n<meta property=\"article:published_time\" content=\"2022-03-30T00:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-12-20T02:39:51+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.telesign.com\/wp-content\/uploads\/2023\/01\/626ab1a270425310755e7aee_lapsus-sim-swap-attacks-1.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Walter Ramirez\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Walter Ramirez\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.telesign.com\\\/es\\\/blog\\\/lapsus-sim-swap-attacks\",\"url\":\"https:\\\/\\\/www.telesign.com\\\/es\\\/blog\\\/lapsus-sim-swap-attacks\",\"name\":\"LAPSUS$ shows how SIM-swap attacks threaten enterprises as much as consumers - Telesign\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.telesign.com\\\/es#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.telesign.com\\\/es\\\/blog\\\/lapsus-sim-swap-attacks#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.telesign.com\\\/es\\\/blog\\\/lapsus-sim-swap-attacks#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.telesign.com\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/626ab1a270425310755e7aee_lapsus-sim-swap-attacks-1.jpeg\",\"datePublished\":\"2022-03-30T00:00:00+00:00\",\"dateModified\":\"2023-12-20T02:39:51+00:00\",\"description\":\"A recent Lapsus SIM-swap attack shows how the process unfolds for all parties. Learn more here.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.telesign.com\\\/es\\\/blog\\\/lapsus-sim-swap-attacks#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.telesign.com\\\/es\\\/blog\\\/lapsus-sim-swap-attacks\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/www.telesign.com\\\/es\\\/blog\\\/lapsus-sim-swap-attacks#primaryimage\",\"url\":\"https:\\\/\\\/www.telesign.com\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/626ab1a270425310755e7aee_lapsus-sim-swap-attacks-1.jpeg\",\"contentUrl\":\"https:\\\/\\\/www.telesign.com\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/626ab1a270425310755e7aee_lapsus-sim-swap-attacks-1.jpeg\",\"width\":1000,\"height\":600,\"caption\":\"A group of people holding smartphones.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.telesign.com\\\/es\\\/blog\\\/lapsus-sim-swap-attacks#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.telesign.com\\\/es\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"LAPSUS$ shows how SIM-swap attacks threaten enterprises as much as consumers\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.telesign.com\\\/es#website\",\"url\":\"https:\\\/\\\/www.telesign.com\\\/es\",\"name\":\"Telesign\",\"description\":\"Phone Number, SMS &amp; Identity Verification APIs | Telesign\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.telesign.com\\\/es#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.telesign.com\\\/es?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.telesign.com\\\/es#organization\",\"name\":\"Telesign\",\"url\":\"https:\\\/\\\/www.telesign.com\\\/es\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/www.telesign.com\\\/es#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.telesign.com\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/62f4589601f1ea9dda43d66d_telesign-logo-generic.webp\",\"contentUrl\":\"https:\\\/\\\/www.telesign.com\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/62f4589601f1ea9dda43d66d_telesign-logo-generic.webp\",\"width\":1200,\"height\":630,\"caption\":\"Telesign\"},\"image\":{\"@id\":\"https:\\\/\\\/www.telesign.com\\\/es#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/TelesignCorp\\\/?utm_source=telesign.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"LAPSUS$ shows how SIM-swap attacks threaten enterprises as much as consumers - Telesign","description":"A recent Lapsus SIM-swap attack shows how the process unfolds for all parties. Learn more here.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.telesign.com\/es\/blog\/lapsus-sim-swap-attacks","og_locale":"es_ES","og_type":"article","og_title":"LAPSUS$ shows how SIM-swap attacks threaten enterprises as much as consumers - Telesign","og_description":"A recent Lapsus SIM-swap attack shows how the process unfolds for all parties. Learn more here.","og_url":"https:\/\/www.telesign.com\/es\/blog\/lapsus-sim-swap-attacks","og_site_name":"Telesign","article_publisher":"https:\/\/www.facebook.com\/TelesignCorp\/?utm_source=telesign.com","article_published_time":"2022-03-30T00:00:00+00:00","article_modified_time":"2023-12-20T02:39:51+00:00","og_image":[{"width":1000,"height":600,"url":"https:\/\/www.telesign.com\/wp-content\/uploads\/2023\/01\/626ab1a270425310755e7aee_lapsus-sim-swap-attacks-1.jpeg","type":"image\/jpeg"}],"author":"Walter Ramirez","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Walter Ramirez","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.telesign.com\/es\/blog\/lapsus-sim-swap-attacks","url":"https:\/\/www.telesign.com\/es\/blog\/lapsus-sim-swap-attacks","name":"LAPSUS$ shows how SIM-swap attacks threaten enterprises as much as consumers - Telesign","isPartOf":{"@id":"https:\/\/www.telesign.com\/es#website"},"primaryImageOfPage":{"@id":"https:\/\/www.telesign.com\/es\/blog\/lapsus-sim-swap-attacks#primaryimage"},"image":{"@id":"https:\/\/www.telesign.com\/es\/blog\/lapsus-sim-swap-attacks#primaryimage"},"thumbnailUrl":"https:\/\/www.telesign.com\/wp-content\/uploads\/2023\/01\/626ab1a270425310755e7aee_lapsus-sim-swap-attacks-1.jpeg","datePublished":"2022-03-30T00:00:00+00:00","dateModified":"2023-12-20T02:39:51+00:00","description":"A recent Lapsus SIM-swap attack shows how the process unfolds for all parties. Learn more here.","breadcrumb":{"@id":"https:\/\/www.telesign.com\/es\/blog\/lapsus-sim-swap-attacks#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.telesign.com\/es\/blog\/lapsus-sim-swap-attacks"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.telesign.com\/es\/blog\/lapsus-sim-swap-attacks#primaryimage","url":"https:\/\/www.telesign.com\/wp-content\/uploads\/2023\/01\/626ab1a270425310755e7aee_lapsus-sim-swap-attacks-1.jpeg","contentUrl":"https:\/\/www.telesign.com\/wp-content\/uploads\/2023\/01\/626ab1a270425310755e7aee_lapsus-sim-swap-attacks-1.jpeg","width":1000,"height":600,"caption":"A group of people holding smartphones."},{"@type":"BreadcrumbList","@id":"https:\/\/www.telesign.com\/es\/blog\/lapsus-sim-swap-attacks#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.telesign.com\/es"},{"@type":"ListItem","position":2,"name":"LAPSUS$ shows how SIM-swap attacks threaten enterprises as much as consumers"}]},{"@type":"WebSite","@id":"https:\/\/www.telesign.com\/es#website","url":"https:\/\/www.telesign.com\/es","name":"Telesign","description":"Phone Number, SMS &amp; Identity Verification APIs | Telesign","publisher":{"@id":"https:\/\/www.telesign.com\/es#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.telesign.com\/es?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/www.telesign.com\/es#organization","name":"Telesign","url":"https:\/\/www.telesign.com\/es","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.telesign.com\/es#\/schema\/logo\/image\/","url":"https:\/\/www.telesign.com\/wp-content\/uploads\/2023\/01\/62f4589601f1ea9dda43d66d_telesign-logo-generic.webp","contentUrl":"https:\/\/www.telesign.com\/wp-content\/uploads\/2023\/01\/62f4589601f1ea9dda43d66d_telesign-logo-generic.webp","width":1200,"height":630,"caption":"Telesign"},"image":{"@id":"https:\/\/www.telesign.com\/es#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/TelesignCorp\/?utm_source=telesign.com"]}]}},"_links":{"self":[{"href":"https:\/\/www.telesign.com\/es\/wp-json\/wp\/v2\/posts\/2761","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.telesign.com\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.telesign.com\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.telesign.com\/es\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.telesign.com\/es\/wp-json\/wp\/v2\/comments?post=2761"}],"version-history":[{"count":0,"href":"https:\/\/www.telesign.com\/es\/wp-json\/wp\/v2\/posts\/2761\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.telesign.com\/es\/wp-json\/wp\/v2\/media\/3120"}],"wp:attachment":[{"href":"https:\/\/www.telesign.com\/es\/wp-json\/wp\/v2\/media?parent=2761"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.telesign.com\/es\/wp-json\/wp\/v2\/categories?post=2761"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.telesign.com\/es\/wp-json\/wp\/v2\/tags?post=2761"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}