{"id":47857,"date":"2022-08-05T16:25:40","date_gmt":"2022-08-05T16:25:40","guid":{"rendered":"https:\/\/www.darkreading.com\/cloud\/stolen-data-attackers-advantage-text-based-2fa"},"modified":"2022-08-05T16:25:40","modified_gmt":"2022-08-05T16:25:40","slug":"stolen-data-gives-attackers-advantage-against-text-based-2fa","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/stolen-data-gives-attackers-advantage-against-text-based-2fa\/","title":{"rendered":"Stolen Data Gives Attackers Advantage Against Text-Based 2FA"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blte08318c810bfcbf6\/62cc91ad915494712c22fe6d\/2FA_Tero_Vesalainen_Alamy.jpg\" class=\"ff-og-image-inserted\"><\/div>\n<p>Companies that rely on texts&nbsp;for a second factor of authentication are putting about 20%&nbsp;of their customers at risk because the information necessary to attack the system is available in compromised databases for sale on the Dark Web.<\/p>\n<p>About 1 billion records synthesized from online databases \u2014 representing about one in every five mobile phone users in the world \u2014 contain users&#8217; names, email addresses, passwords, and phone numbers. This gives attackers everything they need to conduct SMS-based phishing attacks, also known as smishing, says Thomas Olofsson, CTO of cybersecurity firm FYEO.&nbsp;<\/p>\n<p>Cybersecurity experts have long known that the addition of an SMS one-time password is a weak form of two-factor authentication and <a href=\"https:\/\/www.darkreading.com\/endpoint\/mfa-minded-attackers-continue-to-figure-out-workarounds\" target=\"_blank\" rel=\"noopener\">the simplest form of two-factor authentication<\/a> for attackers to compromise. However,&nbsp;combining such attacks with the readily available information on users produces a &#8220;perfect storm&#8221; for attacking accounts, he says.<\/p>\n<p>At Black Hat USA, Olofsson plans to go over findings from research into the problem during a <a href=\"https:\/\/www.blackhat.com\/us-22\/briefings\/schedule\/index.html#smishmash---text-based-fa-spoofing-using-osint-phishing-techniques-and-a-burner-phone-27053\" target=\"_blank\" rel=\"noopener\">session<\/a> on&nbsp;Wednesday, Aug. 10, called &#8220;Smishmash \u2014&nbsp;Text-Based 2FA Spoofing Using OSINT, Phishing Techniques, and a Burner Phone.&#8221;<\/p>\n<p>&#8220;The research that we have done is two parts: How do you bypass 2FA, and how many phone numbers can we tie to an email address and a password,&#8221; he tells Dark Reading. &#8220;So, for about one in five \u2014 a billion \u2014 people, we can connect your email address to your phone number, and that is really bad.&#8221;<\/p>\n<p>The analysis found that by&nbsp;collecting information from known databases of compromised usernames and passwords, researchers could create a database of 22 billion credentials. Linking those credentials to a phone number reduced the exposure to a bit more than 1 billion records, of which about half have been verified.<\/p>\n<p>To make use of those records, attackers can conduct an adversary-in-the-middle attack, where the smishing attack goes to a proxy. When a targeted user opens a link in a malicious SMS message on a mobile device, browsers on iOS and Android rarely show any security information, such as a the URL, since screen real estate is so small. Because of that, few \u2014 if any \u2014 signs of the attack are presented to the user, making the attacks much more effective, Olofsson says.<\/p>\n<p>In addition, smishing attacks are seven times more likely to succeed than phishing attacks conducted through email, he says.<\/p>\n<p>&#8220;It makes it extremely likely that someone will click on the link,&#8221; Olofsson says. &#8220;I even look at our attacks, and I said, wow, I could fall for this.&#8221;<\/p>\n<p>Attackers have used smishing to compromise financial accounts \u2014 especially those linked to cryptocurrency exchanges \u2014 during the past two years, with more than $1.6 billion of crypto stolen so far in 2022, according to <a href=\"https:\/\/www.vice.com\/en\/article\/4aw9jb\/crypto-hackers-stole-more-than-dollar370-million-in-april-alone\" target=\"_blank\" rel=\"noopener\">an analysis published in May<\/a>.&nbsp;<\/p>\n<h2 class=\"regular-text\">SMS for 2FA: Risky Biz<\/h2>\n<p>Meanwhile, the US federal government has already put additional restrictions on any use of SMS for a second factor of authentication. In 2016, the National Institute of Standards and Technology (NIST) warned against using one-time passwords sent as text messages for a second factor to authenticate users.<\/p>\n<p>&#8220;An SMS sent from a mobile phone might seamlessly switch to an internet message delivered to, say, a Skype or Google Voice phone number. Users shouldn&#8217;t have to know the difference when they hit send \u2014 that\u2019s part of the Internet\u2019s magic. But it does matter for security,&#8221; NIST <a href=\"https:\/\/www.nist.gov\/blogs\/cybersecurity-insights\/questionsand-buzz-surrounding-draft-nist-special-publication-800-63-3\" target=\"_blank\" rel=\"noopener\">wrote in an explanation of the policy<\/a>, adding: &#8220;While a password coupled with SMS has a much higher level of protection relative to passwords alone, it doesn&#8217;t have the strength of device authentication mechanisms inherent in the other authenticators allowable&#8221; by NIST guidelines.<\/p>\n<p>To make it less likely that such attacks succeed, users should ignore any notifications that come through SMS and instead log directly into their account. <\/p>\n<p>&#8220;Never trust an SMS message,&#8221; Olofsson says. &#8220;If you feel something is wrong, don&#8217;t click on it, don&#8217;t trust it. Go on a computer, and see if you have an e-mail, because at least you can verify the headers then.&#8221;<\/p>\n<p>Unfortunately, many financial institutions and other companies make it hard for users to implement better security because they only offer SMS as an option for the second factor of authentication. Adding reCAPTCHA checks can give users a hint that something is wrong,&nbsp;Olofsson notes, because any adversary-in-the-middle attack will display the proxy server, not the user&#8217;s IP address.<\/p>\n<p>Read More <a href=\"https:\/\/www.darkreading.com\/cloud\/stolen-data-attackers-advantage-text-based-2fa\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>With names, email addresses, and mobile numbers from underground databases, one person in five is at risk of account compromise even with SMS two-factor authentication in place.Read More <a href=\"https:\/\/www.darkreading.com\/cloud\/stolen-data-attackers-advantage-text-based-2fa\">HERE<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[151],"tags":[],"class_list":["post-47857","post","type-post","status-publish","format-standard","hentry","category-darkreading-ti"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Stolen Data Gives Attackers Advantage Against Text-Based 2FA 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/stolen-data-gives-attackers-advantage-against-text-based-2fa\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Stolen Data Gives Attackers Advantage Against Text-Based 2FA 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/stolen-data-gives-attackers-advantage-against-text-based-2fa\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2022-08-05T16:25:40+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blte08318c810bfcbf6\/62cc91ad915494712c22fe6d\/2FA_Tero_Vesalainen_Alamy.jpg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/stolen-data-gives-attackers-advantage-against-text-based-2fa\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/stolen-data-gives-attackers-advantage-against-text-based-2fa\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Stolen Data Gives Attackers Advantage Against Text-Based 2FA\",\"datePublished\":\"2022-08-05T16:25:40+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/stolen-data-gives-attackers-advantage-against-text-based-2fa\\\/\"},\"wordCount\":735,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/stolen-data-gives-attackers-advantage-against-text-based-2fa\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/blte08318c810bfcbf6\\\/62cc91ad915494712c22fe6d\\\/2FA_Tero_Vesalainen_Alamy.jpg\",\"articleSection\":[\"DarkReading |TI\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/stolen-data-gives-attackers-advantage-against-text-based-2fa\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/stolen-data-gives-attackers-advantage-against-text-based-2fa\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/stolen-data-gives-attackers-advantage-against-text-based-2fa\\\/\",\"name\":\"Stolen Data Gives Attackers Advantage Against Text-Based 2FA 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/stolen-data-gives-attackers-advantage-against-text-based-2fa\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/stolen-data-gives-attackers-advantage-against-text-based-2fa\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/blte08318c810bfcbf6\\\/62cc91ad915494712c22fe6d\\\/2FA_Tero_Vesalainen_Alamy.jpg\",\"datePublished\":\"2022-08-05T16:25:40+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/stolen-data-gives-attackers-advantage-against-text-based-2fa\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/stolen-data-gives-attackers-advantage-against-text-based-2fa\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/stolen-data-gives-attackers-advantage-against-text-based-2fa\\\/#primaryimage\",\"url\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/blte08318c810bfcbf6\\\/62cc91ad915494712c22fe6d\\\/2FA_Tero_Vesalainen_Alamy.jpg\",\"contentUrl\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/blte08318c810bfcbf6\\\/62cc91ad915494712c22fe6d\\\/2FA_Tero_Vesalainen_Alamy.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/stolen-data-gives-attackers-advantage-against-text-based-2fa\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Stolen Data Gives Attackers Advantage Against Text-Based 2FA\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Stolen Data Gives Attackers Advantage Against Text-Based 2FA 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/stolen-data-gives-attackers-advantage-against-text-based-2fa\/","og_locale":"en_US","og_type":"article","og_title":"Stolen Data Gives Attackers Advantage Against Text-Based 2FA 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/stolen-data-gives-attackers-advantage-against-text-based-2fa\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2022-08-05T16:25:40+00:00","og_image":[{"url":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blte08318c810bfcbf6\/62cc91ad915494712c22fe6d\/2FA_Tero_Vesalainen_Alamy.jpg","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/stolen-data-gives-attackers-advantage-against-text-based-2fa\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/stolen-data-gives-attackers-advantage-against-text-based-2fa\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Stolen Data Gives Attackers Advantage Against Text-Based 2FA","datePublished":"2022-08-05T16:25:40+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/stolen-data-gives-attackers-advantage-against-text-based-2fa\/"},"wordCount":735,"commentCount":0,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/stolen-data-gives-attackers-advantage-against-text-based-2fa\/#primaryimage"},"thumbnailUrl":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blte08318c810bfcbf6\/62cc91ad915494712c22fe6d\/2FA_Tero_Vesalainen_Alamy.jpg","articleSection":["DarkReading |TI"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.threatshub.org\/blog\/stolen-data-gives-attackers-advantage-against-text-based-2fa\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/stolen-data-gives-attackers-advantage-against-text-based-2fa\/","url":"https:\/\/www.threatshub.org\/blog\/stolen-data-gives-attackers-advantage-against-text-based-2fa\/","name":"Stolen Data Gives Attackers Advantage Against Text-Based 2FA 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/stolen-data-gives-attackers-advantage-against-text-based-2fa\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/stolen-data-gives-attackers-advantage-against-text-based-2fa\/#primaryimage"},"thumbnailUrl":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blte08318c810bfcbf6\/62cc91ad915494712c22fe6d\/2FA_Tero_Vesalainen_Alamy.jpg","datePublished":"2022-08-05T16:25:40+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/stolen-data-gives-attackers-advantage-against-text-based-2fa\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/stolen-data-gives-attackers-advantage-against-text-based-2fa\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/stolen-data-gives-attackers-advantage-against-text-based-2fa\/#primaryimage","url":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blte08318c810bfcbf6\/62cc91ad915494712c22fe6d\/2FA_Tero_Vesalainen_Alamy.jpg","contentUrl":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blte08318c810bfcbf6\/62cc91ad915494712c22fe6d\/2FA_Tero_Vesalainen_Alamy.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/stolen-data-gives-attackers-advantage-against-text-based-2fa\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Stolen Data Gives Attackers Advantage Against Text-Based 2FA"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/47857","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=47857"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/47857\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=47857"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=47857"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=47857"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}