One time SMS delivered "codes" delivered from banks, tech companies (Google, Meta, Amazon), banks, crypto exchanges, dating sites and messaging apps (WhatsApp, Viber, Signal) are vulnerable.
The companies sending codes use a sprawling and opaque network of contractors and subcontractors to save money. The catch is that any of these middleman companies can see everything transmitted. https://www.lighthousereports.com/investigation/two-factor-insecurity/ #Security #CyberSecurity #SMStext #logincodes #2FA #passwords