Gemini

Hedera

Hackers gained access to the Authy Android app database and “were able to identify data associated with [accounts], including phone numbers,” according to a July 1 security alert post issued by the app’s developer, Twilio.
The accounts themselves “are not compromised,” the post stated, implying that the attackers were not able to gain authentication credentials. However, the exposed phone numbers <a href="https://www.twilio.com/en-us/changelog/Security_Alert_Authy_App_Android_iOS" target="_blank" rel="noopener nofollow">may</a> be used for “phishing and smishing attacks” in the future. Because of this risk, Twilio encouraged Authy users to “stay diligent and have heightened awareness around the texts they are receiving.”
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-07/36b388f4-fa70-4f2a-8f4b-8602a476bfb5.png" alt="" title="">
 <figcaption style="text-align: center;">
 Twilio security alert regarding Authy data breach. Source: Twilio
 </figcaption>
</figure>
Related: <a href="https://cointelegraph.com/learn/what-is-a-phishing-attack-in-crypto-and-how-to-prevent-it">What is a phishing attack in crypto, and how to prevent it?</a>
Centralized exchange users often rely on Authy for two-factor authentication (2FA). It generates a code on the user’s device, which the exchange may ask for before it performs withdrawals, transfers or other sensitive tasks. Exchanges Gemini and Crypto.com both <a href="https://support.gemini.com/hc/en-us/articles/360038849612-What-is-Authy-and-how-do-I-set-it-up-for-my-account" target="_blank" rel="noopener nofollow">use</a> Authy as their default 2FA app, and Coinbase, Binance and many other exchanges allow it as an option.
Authy is sometimes compared to Google’s Authenticator app, which has a similar purpose and is a competitor.
The attacker gained access through an “unauthenticated endpoint,” according to the post. The team has secured this endpoint, and the app no longer accepts unauthenticated requests in the future. It encouraged users to upgrade to the latest version of the app, which contains security improvements.
Twilio claimed that users’ authenticator codes have not been compromised, so the attackers should not be able to access their exchange accounts. “We have seen no evidence that the threat actors obtained access to Twilio’s systems or other sensitive data,” the company stated.
According to a report from Seeking Alpha, the hack was <a href="https://www.msn.com/en-us/money/markets/twilio-slides-as-hackers-used-unsecured-api-to-access-authy-users-records-report/ar-BB1pmcFj?ocid=BingNewsSerp" target="_blank" rel="noopener nofollow">performed</a> by the ShinyHunters cybercriminal group, which “leaked a text file that purportedly shows the 33 million phone numbers registered with Authy.” In 2021, cybersecurity blog Restoreprivacy reported that this same criminal group was responsible for an AT&amp;T data breach that&nbsp;<a href="https://restoreprivacy.com/att-data-breach-70-million-customers/" target="_blank" rel="noopener nofollow">resulted</a> in the data of 51 million customers being released online.
Authenticator apps were developed to prevent SIM swap attacks, a type of social engineering scheme that involves <a href="https://cointelegraph.com/news/crypto-sim-swap-how-easy-is-sim-swap-crypto-hack">convincing a phone company</a> to transfer a user’s phone number to the attacker. Once the attacker gains control of the user’s phone account, they use it to receive the user’s 2FA codes without needing to physically possess the user’s phone. 
This type of attack is still prevalent today, as some users still receive 2FA codes through text messaging instead of through an app. On June 12, blockchain security firm SlowMist reported that millions of dollars <a href="https://cointelegraph.com/news/okx-investigates-multi-million-theft-sim-swap-attacks">were recently lost by OKX users</a> due to SIM swap attacks.
Magazine:&nbsp;<a href="https://cointelegraph.com/magazine/crypto-phishing-scammer-hedera/">Crypto-Sec: Phishing scammer targets Hedera users, address poisoner gets $70K</a>

Authy 2FA app leaked phone numbers that may be used for text phishing

Cointelegraph

Other articles published on Jul 3, 2024

MoonBag's Attractive Referral Program Diverts Investors from Ondo and SingularityNET

Bitcoin Plunges Below $60,000 for the Second Time in 15 Days: Here’s What It Implies!

Hackers Steal $8 Million in Tokens

Basel Committee Approves Cryptoasset Standards Update, Effective 1st Jan 2026

Solana Memecoin Trump the Felon Skyrockets 8,100% and Will Surge 18,000% Before KuCoin Listing, W...

Billy Soars Towards 49,000% Rise Amidst Bitget Listing

Join our free newsletter for daily crypto updates!