Fun

AT&T Responds to Crypto Exec’s SIM Swap Suit: See You in Court

News Feed - 2019-10-29 04:10:29

AT&T said it would fight allegations that it was negligent in a customer’s loss of $1.7 million in a SIM swap.


The allegations come from Seth Shapiro, VideoCoin’s head of strategy, who blames the phone giant for failing to secure his phone during a May 2018 hack.


Speaking exclusively to CoinDesk, AT&T spokesman Jim Greer said: “It is unfortunate that Mr. Shapiro experienced this, but we dispute his allegations. We look forward to presenting our case in court.”


After a series of brazen SIM swaps, Shapiro said he lost $1.7 million in cryptocurrency. Hackers allegedly seized control of his cellphone, reset his email and breached his exchange accounts to steal $1 million from him, with the balance belonging to other people for upcoming investments.


Greer said AT&T was cautioning all its customers to bolster their security measures, and that mobile phone authentication is not enough: “Recent high profile cases reinforce the importance of businesses and consumers taking steps to protect against SIM swap fraud, such as not using mobile phone numbers as the single source of security and authentication.”


To access Shapiro’s SIM card, the hackers allegedly paid off AT&T employees – now since fired and being prosecuted in criminal court – to gain control.


According to Shapiro, the initial phone hack occurred during the May 2018 Consensus conference. On the same date, Shapiro’s VideoCoin announced the close of a $50 million private coin offering, for which his related Alphabit Fund subscribed. Two colleagues of his in several ventures – entrepreneurs Chris Kitze and Enzo Villani – were also SIM hacked at the same time, but they did not lose any funds.


In April 2019, Joel Ortiz, the alleged 21-year-old mastermind of the Shapiro hack, was sentenced to 10 years in federal prison, after pleading no contest to charges that he orchestrated 13 SIM swaps. An accomplice, a 19-year-old minor, was charged in seven cases. Ortiz was alleged to have made off with $5.2 million, but only $400,000 was recovered.


Another high-profile SIM hack case was brought against AT&T last year, when Michael Terpin, a crypto exec with a public relations firm, investment company and conference series, and a partner of Shapiro’s in several of those ventures, said he lost $23.8 million when his phone was hacked.


Terpin sued the telephone company to reclaim his losses, in addition to $200 million in punitive damages and that the breach was a violation of the Federal Communication Act. The perpetrators were alleged to be a New York City-based, 21-year-old thief named Nicholas Truglia, along with his 16-year-old computer hacking accomplice.


According to an affidavit filed by a Truglia friend caught up peripherally in his bust, the thief’s M.O. was to have himself fraudulently added as an admin to a target’s phone account, then proceed to a local AT&T store where he used his own ID to verify his identity and instruct an AT&T employee to make the changes to provide him access to the SIM. The least secure security measure


The loss highlights an obvious question for security experts, who wondered why an experienced crypto executive would keep such high sums in an online exchange rather than “cold storage” – i.e. offline storage, where it would be completely shielded from remote hacks.


Relying on a cellphone to secure any part of one’s online security apparatus is a huge potential vulnerability, Haseeb Awan, CEO of the California-based SIM card security provider DontPort, told CoinDesk.


“People should avoid SMS [verification] whenever possible,” Awan said. “Two-factor authentication is probably the worst form of authentication,” because of the ease with which hackers compromise it.


Even without the AT&T moles alleged by Shapiro, Awan, himself the target of multiple SIM swaps, said hackers social engineer, trick and buy their way into victims’ mobile accounts every day, making the value of cellphone verification almost negligible.


Many people think they will never get hacked simply because they have never been before, Awan said: “It’s kind of like saying you will never die because you haven’t yet.”


That hubris makes them even more vulnerable.


SIM swapping is a relatively well-known threat among high-profile crypto holders, who are often targeted because of their publicity and the heightened likelihood that they may hold valuable assets.


Shapiro, the current head of strategy for VideoCoin and founder of various crypto media projects, even told investigators that he immediately suspected SIM-swapping when his phone suddenly stopped working.


Awan said he was surprised Shapiro could have lost so much money so easily: “He’s not some newbie. He’s been in crypto for a while.”


AT&T’s Greer said that offline storage is the only real solution: “For cryptocurrency, security experts recommend further safeguards, such as keeping cryptocurrency in ‘cold storage,’ an offline environment that can’t be accessed via the internet, and following instructions regarding storage of wallet and exchange access credentials.”


CoinDesk contacted Shapiro, his legal counsel, Kitze, Villani and Terpin, none of whom responded to requests for comment.


It was unknown from the legal filings, which, if any, security products the executives had on their hacked phones.


SIM card image via Shutterstock

News Feed

Savannah Fortis10 hours agoThe UK releases key ambitions for global AI summitThe officials in the U.K. released their priorities for the upcoming global AI summit, during which they plan to focus on risk and policy.1261
Data privacy and security concerns worry nearly half of tech industry consumers: Report
Savannah Fortis11 hours agoData privacy and security concerns worry nearly half of tech industry consumers: ReportFor 48% of respondents in Aleo’s 2024 Data privacy report, data privacy and security are considered the
66% of Europeans Feel Optimistic About Future of Bitcoin, Study Shows
66% of Europeans Feel Optimistic About Future of Bitcoin, Study ShowsEuropeans are feeling more optimistic about the future of bitcoin. A recent study shows that two thirds of them
LBank Exchange Will List LMCSWAP on November 15, 2021
LBank Exchange Will List LMCSWAP on November 15, 2021 press release PRESS RELEASE. INTERNET CITY, DUBAI, Nov. 15, 2021 – LBank Exchange, a global digital asset trading platfo
Amaka Nwaokocha1 hour agoNigerian social payments app shuts down crypto exchange servicesThe company cited that it will cease operations of its exchange services as part of the shareholders" decision to restructure the b
5 Best Altcoins to Join the Bull Run as Solana TVL Reaches New Highs
According to Messari’s latest reports, Solana TVL (total value locked) absolutely exploded in Q4 2024, ending the year in style. TVL on Solana rose to $8.6B, an incredible growth of 486% from last year. Furthermore
Nigeria Crypto Ban: Bitcoin Sells for $76K as Deposits on Centralized Exchanges Plummet
Nigeria Crypto Ban: Bitcoin Sells for $76K as Deposits on Centralized Exchanges Plummet According to a website that tracks the price of bitcoin across the globe,
Crypto’s next leap: Ether ETFs through Keyrock’s kaleidoscope
Zoltan Vardai7 hours agoCrypto’s next leap: Ether ETFs through Keyrock’s kaleidoscopeThe approval of Bitcoin ETFs was a major foot in the door for Ether ETFs, Keyrock’s CEO Kevin de Patoul told Cointelegraph.495 To
8 US States Propose a Bitcoin Reserve Before Trump’s Inauguration, Bullish for New Crypto in 2025?
Donald Trump’s pro-crypto stance has cooked up a storm in the crypto market. Ever since he won the presidential election, the market has been raging like a wild bull. Bitcoin
Felix Ng5 hours agoSaylor’s MicroStrategy plans $750M stock sale, possibly buying more BitcoinMicroStrategy, one of the largest corporate holders of Bitcoin, said proceeds of the sale could be used to buy up even more
Tether, ICOs, Craig Wright – Attorney Divulges New Details on Billion Dollar Crypto Lawsuits
Tether, ICOs, Craig Wright - Attorney Divulges New Details on Billion Dollar Crypto Lawsuits On April 3, the law firms Roche Cyrulnik Freedman and Selendy & Gay filed 11 class-ac
CBDC Could Increase Nigeria’s GDP by $29 Billion in 10 Years: President Buhari
CBDC Could Increase Nigeria’s GDP by $29 Billion in 10 Years: President Buhari The Nigerian president, Muhammadu Buhari, suggested in a recent speech that the new e-naira central