Hacker Alert on 2FA Codes: This Method May Not Be As Safe As Thought

Crypto News – An unencrypted database controlling access to services from some of the largest tech corporations in the world was found by security researcher Anurag Sen.

Hacker Alert on 2FA Codes: This Method May Not Be As Safe As Thought

A short message service (SMS) routing provider owns the database, which is used to provide users of Meta, Google, and maybe cryptocurrency companies with two-factor authentication (2FA) codes.

Users that log into Meta, Google, and TikTok platforms receive security codes from YX International. The organization makes sure that messages from users are sent quickly over global mobile networks. Security codes that are a component of the two-factor authentication system many big businesses employ to safeguard user accounts are among the communications it sends.

Coinbase Warns Users

Although it aims to increase security, two-factor authentication is not a panacea. Consequently, 2FA is a minimal security measure, but it is not infallible, according to cryptocurrency exchange Coinbase. Funds from cryptocurrency wallets can still be stolen by hackers.

While 2FA seeks to improve security, it is not foolproof. Hackers who acquire the authentication factors can still gain unauthorized access to accounts. Common ways to do so include phishing attacks, account recovery procedures, and malware. Hackers can also intercept text messages used in 2FA,

Coinbase