SEC confirms X account hack happened after a “SIM swap”
SEC says hacker that compromised its X account used a “SIM swap” attack. The unauthorised access had seen the hacker publish a fake spot Bitcoin ETFs approval announcement. Investigations into the breach are ongoing, but SEC says its 2FA feature had been disabled at the time of the compromise. The US Securities and Exchange Commission ( SEC ) has confirmed that the hack on the agency’s X account , and the resulting “fake approval” of spot Bitcoin ETF s, happened after an apparent “SIM swap.” According to the SEC, the attacker used a cell phone number linked to the agency’s X account. The unauthorised entity accessed the phone number via a telecom carrier the SEC uses, and not from the regulator’s system. However, the SEC notes that at the time of the hack, two factor authentication (2FA) for the social media account was disabled. In a press release , the SEC said 2FA for its X account had been disabled s...