{"id":9535,"date":"2021-11-04T13:00:00","date_gmt":"2021-11-04T18:00:00","guid":{"rendered":"https:\/\/whitlockco.websitepreview.dev\/?p=9535"},"modified":"2022-09-22T17:02:13","modified_gmt":"2022-09-22T22:02:13","slug":"two-factor-authentication-hacking","status":"publish","type":"post","link":"https:\/\/whitlockco.com\/two-factor-authentication-hacking\/","title":{"rendered":"Two-Factor Authentication Hacking"},"content":{"rendered":"
\n
\"Chris<\/figure><\/div>\n\n\n

By Chris Griesemer, partner at The Whitlock Co. and specialist in internet technology audits for banking clients.<\/p>\n\n\n\n

First, let me explain how two-factor authentication (2FA) works. 2FA requires you to not only enter your username and password but also a one-time code from another source such as a phone, email, or authenticator app. When you sign up on a website or an app that requires a login, you can increase the security of that site\/app by using 2FA. Take your bank for example. When you turn on the 2FA option on your online bank account, it increases your account security by texting you a code that you must enter in order to log in.<\/p>\n\n\n\n

Be Vigilant Even With Two-Factor Authentication<\/h2>\n\n\n\n

According to Joseph Cox at Vice Magazine in an article titled, \u201cThe Booming Underground Market for Bots That Steal Your 2FA Codes\u201d, hackers have devised a creative way to steal your 2FA access code. For this hack to work, a few assumptions must be made. First, a hacker needs access to your username, password, and cell phone number. Don\u2019t underestimate how many people have had their financial login information stolen. In 2020 alone, nearly half of Americans experienced some form of financial identity theft. Some people have so much confidence in 2FA, they relax on the complexity of their password. Or they don\u2019t create unique passwords for different sites because again, they know they are using 2FA and think they are safe. This could easily happen to you if you are not aware of how to identify it.<\/p>\n\n\n\n

How Does 2FA Hacking Work?<\/h2>\n\n\n\n

Hackers begin by entering their target\u2019s cell phone number into an automated bot. The bot then calls the cell phone number of the target and plays a recording telling them a suspicious transaction has been attempted on their account and to make sure that it should be declined; a code will be sent to the target\u2019s cell phone. Then the hackers<\/a> use the username and password they have already compromised  and attempt to log in to the service. The service then sends a code to the user and the user thinks this is the code they need to enter to tell this bot that they did not authorize the suspicious transaction. Unfortunately, when the target sends the code to the bot, it gives the hackers the 2FA code and they can log into the website or app and do what they want.<\/p>\n\n\n\n

How to Avoid This Two-Factor Authentication Hack<\/h2>\n\n\n\n

To make sure you don\u2019t fall for this trick, never type a code into a robo call. If this happens to you, know that your username and password have been compromised and you should start identifying which ones you need to change. Maybe all of them. If you have questions about this or any cyber security<\/a> issue,  please don\u2019t hesitate to contact<\/a> Chris Griesemer or Caleb Swadley at The Whitlock Co<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

By Chris Griesemer, partner at The Whitlock Co. and specialist in internet technology audits for banking clients. First, let me explain how two-factor authentication (2FA) works. 2FA requires you to not only enter your username and password but also a one-time code from another source such as a phone, email, or authenticator app. When you […]<\/p>\n","protected":false},"author":9,"featured_media":6570,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"content-type":"","footnotes":""},"categories":[582,89],"tags":[365,604],"acf":[],"yoast_head":"\nTwo-Factor Authentication Hacking & How to Avoid It<\/title>\n<meta name=\"description\" content=\"Chris Griesemer, our expert in internet technology audits for banking clients, discusses two-factor authentication (2FA) hacking and how to avoid it.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/whitlockco.com\/two-factor-authentication-hacking\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Two-Factor Authentication Hacking & How to Avoid It\" \/>\n<meta property=\"og:description\" content=\"Chris Griesemer, our expert in internet technology audits for banking clients, discusses two-factor authentication (2FA) hacking and how to avoid it.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/whitlockco.com\/two-factor-authentication-hacking\/\" \/>\n<meta property=\"og:site_name\" content=\"The Whitlock Co.\" \/>\n<meta property=\"article:published_time\" content=\"2021-11-04T18:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-09-22T22:02:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/whitlockco.com\/wp-content\/uploads\/2017\/08\/chris-griesemer-headshot.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"857\" \/>\n\t<meta property=\"og:image:height\" content=\"1200\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"client_admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"client_admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Two-Factor Authentication Hacking & How to Avoid It","description":"Chris Griesemer, our expert in internet technology audits for banking clients, discusses two-factor authentication (2FA) hacking and how to avoid it.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/whitlockco.com\/two-factor-authentication-hacking\/","og_locale":"en_US","og_type":"article","og_title":"Two-Factor Authentication Hacking & How to Avoid It","og_description":"Chris Griesemer, our expert in internet technology audits for banking clients, discusses two-factor authentication (2FA) hacking and how to avoid it.","og_url":"https:\/\/whitlockco.com\/two-factor-authentication-hacking\/","og_site_name":"The Whitlock Co.","article_published_time":"2021-11-04T18:00:00+00:00","article_modified_time":"2022-09-22T22:02:13+00:00","og_image":[{"width":857,"height":1200,"url":"https:\/\/whitlockco.com\/wp-content\/uploads\/2017\/08\/chris-griesemer-headshot.jpg","type":"image\/jpeg"}],"author":"client_admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"client_admin","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/whitlockco.com\/two-factor-authentication-hacking\/#article","isPartOf":{"@id":"https:\/\/whitlockco.com\/two-factor-authentication-hacking\/"},"author":{"name":"client_admin","@id":"https:\/\/whitlockco.com\/#\/schema\/person\/a865622af451291a8659e608ac2e054c"},"headline":"Two-Factor Authentication Hacking","datePublished":"2021-11-04T18:00:00+00:00","dateModified":"2022-09-22T22:02:13+00:00","mainEntityOfPage":{"@id":"https:\/\/whitlockco.com\/two-factor-authentication-hacking\/"},"wordCount":494,"commentCount":0,"publisher":{"@id":"https:\/\/whitlockco.com\/#organization"},"image":{"@id":"https:\/\/whitlockco.com\/two-factor-authentication-hacking\/#primaryimage"},"thumbnailUrl":"https:\/\/whitlockco.com\/wp-content\/uploads\/2017\/08\/chris-griesemer-headshot.jpg","keywords":["hacking","Two Factor Authentication"],"articleSection":["Cybersecurity","General Business Advice"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/whitlockco.com\/two-factor-authentication-hacking\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/whitlockco.com\/two-factor-authentication-hacking\/","url":"https:\/\/whitlockco.com\/two-factor-authentication-hacking\/","name":"Two-Factor Authentication Hacking & How to Avoid It","isPartOf":{"@id":"https:\/\/whitlockco.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/whitlockco.com\/two-factor-authentication-hacking\/#primaryimage"},"image":{"@id":"https:\/\/whitlockco.com\/two-factor-authentication-hacking\/#primaryimage"},"thumbnailUrl":"https:\/\/whitlockco.com\/wp-content\/uploads\/2017\/08\/chris-griesemer-headshot.jpg","datePublished":"2021-11-04T18:00:00+00:00","dateModified":"2022-09-22T22:02:13+00:00","description":"Chris Griesemer, our expert in internet technology audits for banking clients, discusses two-factor authentication (2FA) hacking and how to avoid it.","breadcrumb":{"@id":"https:\/\/whitlockco.com\/two-factor-authentication-hacking\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/whitlockco.com\/two-factor-authentication-hacking\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/whitlockco.com\/two-factor-authentication-hacking\/#primaryimage","url":"https:\/\/whitlockco.com\/wp-content\/uploads\/2017\/08\/chris-griesemer-headshot.jpg","contentUrl":"https:\/\/whitlockco.com\/wp-content\/uploads\/2017\/08\/chris-griesemer-headshot.jpg","width":857,"height":1200,"caption":"Chris Griesemer"},{"@type":"BreadcrumbList","@id":"https:\/\/whitlockco.com\/two-factor-authentication-hacking\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/whitlockco.com\/"},{"@type":"ListItem","position":2,"name":"Two-Factor Authentication Hacking"}]},{"@type":"WebSite","@id":"https:\/\/whitlockco.com\/#website","url":"https:\/\/whitlockco.com\/","name":"The Whitlock Co.","description":"Full-Service Accounting Firm","publisher":{"@id":"https:\/\/whitlockco.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/whitlockco.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/whitlockco.com\/#organization","name":"The Whitlock Co.","url":"https:\/\/whitlockco.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/whitlockco.com\/#\/schema\/logo\/image\/","url":"https:\/\/whitlockco.com\/wp-content\/uploads\/2021\/01\/cropped-Logo-W-1.png","contentUrl":"https:\/\/whitlockco.com\/wp-content\/uploads\/2021\/01\/cropped-Logo-W-1.png","width":512,"height":512,"caption":"The Whitlock Co."},"image":{"@id":"https:\/\/whitlockco.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/whitlockco.com\/#\/schema\/person\/a865622af451291a8659e608ac2e054c","name":"client_admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/whitlockco.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/96285e5511a7d3073ceb5ef729d7e084?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/96285e5511a7d3073ceb5ef729d7e084?s=96&d=mm&r=g","caption":"client_admin"}}]}},"_links":{"self":[{"href":"https:\/\/whitlockco.com\/wp-json\/wp\/v2\/posts\/9535"}],"collection":[{"href":"https:\/\/whitlockco.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/whitlockco.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/whitlockco.com\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/whitlockco.com\/wp-json\/wp\/v2\/comments?post=9535"}],"version-history":[{"count":0,"href":"https:\/\/whitlockco.com\/wp-json\/wp\/v2\/posts\/9535\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/whitlockco.com\/wp-json\/wp\/v2\/media\/6570"}],"wp:attachment":[{"href":"https:\/\/whitlockco.com\/wp-json\/wp\/v2\/media?parent=9535"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/whitlockco.com\/wp-json\/wp\/v2\/categories?post=9535"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/whitlockco.com\/wp-json\/wp\/v2\/tags?post=9535"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}