FriendTech adds option to swap from phone to email after user reports of SIM swap attacks

Quick Take

  • FriendTech, a crypto-based social media platform, now allows switching from phone number to email for login.
  • This comes amid multiple SIM swap attacks targeting FriendTech users.

Crypto-based social media platform FriendTech added the ability to switch from phone number to email. This change comes after several reports of SIM swap incidents in which FriendTech users saw funds from their accounts being taken.

Over the last week, at least six FriendTech have claimed to have experienced SIM swap attacks. In these incidents, attackers accessed user accounts and liquidated their keys, a form of social tokens linked to influencers on the platform, bestowing certain benefits to its holders.

A SIM swap attack occurs when an individual persuades a telecom provider to shift a victim’s phone number to a new SIM card under the perpetrator’s jurisdiction. With this control, the attacker can intercept the victim’s text messages and calls.

On October 3, two such incidents were reported, resulting in a purported loss of 42 ETH (equivalent to $70,000). Within the last day, another four FriendTech users became targets, enabling attackers to accumulate gains of approximately $385,000, as noted by on-chain investigator ZachXBT.

Understanding SIM swap attacks

Ouriel Ohayon, the co-founder and CEO of Zengo wallet, explained that attackers can pinpoint SIM swap victims amongst FriendTech users by leveraging information from their public X accounts.

THE SCOOP

Keep up with the latest news, trends, charts and views on crypto and DeFi with a new biweekly newsletter from The Block's Frank Chaparro

By signing-up you agree to our Terms of Service and Privacy Policy
By signing-up you agree to our Terms of Service and Privacy Policy

As FriendTech associates users’ X profiles, data about specific users can be inferred from accessible on-chain records. This data can be subsequently juxtaposed with previous data breaches to obtain phone numbers, facilitating attackers in orchestrating SIM swap attempts with telecom providers, Ohayon explained.

Update: The headline has been updated for clarity.


© 2023 The Block. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

About Author

Vishal Chawla is The Block’s crypto ecosystems editor and has spent over six years covering tech protocols, cybersecurity, artificial intelligence and cloud computing. Vishal likes to delve deep into blockchain intricacies to ensure readers are well-informed about the continuously evolving crypto landscape. He is also a staunch advocate for rigorous security practices in the space. Before joining The Block, Vishal held positions at IDG ComputerWorld, CIO, and Crypto Briefing. He can be reached on Twitter at @vishal4c and via email at [email protected]

Editor

To contact the editor of this story:
Tim Copeland at
[email protected]