{"id":45483,"date":"2024-07-05T17:32:18","date_gmt":"2024-07-05T15:32:18","guid":{"rendered":"https:\/\/www.apfelpatient.de\/?p=45483"},"modified":"2024-07-05T17:36:22","modified_gmt":"2024-07-05T15:36:22","slug":"authy-hacked-millions-of-phone-numbers-affected","status":"publish","type":"post","link":"https:\/\/www.apfelpatient.de\/en\/news\/authy-gehackt-millionen-von-telefonnummern-betroffen","title":{"rendered":"Authy hacked: millions of phone numbers affected"},"content":{"rendered":"

The security of multi-factor authentication apps is of utmost importance to many users. One of the best known of these apps is Authy, developed by the US company Twilio. But now it has been revealed that millions of phone numbers have been intercepted, which is causing concern among many users. Below you will find out what happened, what measures have been taken and how you can protect yourself.<\/strong><\/p>\n\n\n\n

Using multi-factor authentication (MFA) is a proven way to better secure your online accounts. Apps like Authy generate time-based one-time passwords (TOTP) that are required in addition to your password to log in. Authy is particularly popular because it is easy to use and increases security with additional safeguards, such as a master password. But no system is completely secure, as the recent incident shows.<\/p>\n\n\n\n

Authy hacked: What happened?<\/h3>\n\n\n\n

Twilio, the company behind Authy, has reported<\/a>that attackers gained access to Authy account data via an unsecured API endpoint. This resulted in the phone numbers of over 33 million users being compromised. Fortunately, there is no indication that other data such as passwords or TOTP codes were compromised. The user accounts themselves do not appear to be directly affected, but the data released includes account IDs, phone numbers, and information on the status of the accounts and the number of registered devices.<\/p>\n\n\n\n

Who is behind it?<\/h4>\n\n\n\n

The group ShinyHunters appears to be behind the attack and has published a CSV file with the stolen data. This group is known for its cyberattacks and data leaks, which it often sells or publishes online. Twilio immediately took action after the incident became known to close the unsecured API endpoint and block unauthenticated requests.<\/p>\n\n\n\n

Precautions and Recommendations<\/h4>\n\n\n\n

Twilio advises all users to update the Authy app to the latest version. Users should also be particularly vigilant against phishing attempts. Phishing is a method in which attackers try to obtain personal information through fake emails or messages. At the end of 2022, Twilio was already the target of a successful phishing attack in which criminals gained access to internal systems and stole customer data.<\/p>\n\n\n\n

protection against future attacks<\/h4>\n\n\n\n

To better protect yourself, you should follow these steps:<\/p>\n\n\n\n