Blog | G5 Cyber Security

Here’s Why Account Authentication Shouldn’t Use SMS

Database held 26 million text messages, some of which were two-step verification codes and password reset links. When it was found, the database was still recording texts in near real-time, offering a huge resource for attackers. The database belonged to Voxox, a San Diego-based company formerly known as Telecentris, which specializes in VOIP, bulk SMS and other cloud-based telecommunication services. Voxox offers a service to help organizations deliver SMSes using the Short Message Peer-to-Peer – SMPP – protocol.”]

Source: https://www.cuinfosecurity.com/heres-account-authentication-shouldnt-use-sms-a-11708

Exit mobile version