“GOT THAT BOOMER!”: HOW CYBERCRIMINALS STEAL OTPS FOR SIM SWAPS AND RAIDING BANK ACCOUNTS

Summary from the TLDR InfoSec newsletter

This article details findings from the leak of logs belonging to Estate, an interception operation that carried out thousands of automated phone calls for phishing attacks. Members can only sign up to Estate with referral codes and once registered can search through breached account passwords for victims. Estate contains automated scripts to convince victims to provide SMS OTPs or credit card security codes.