• 3,000 firms
  • Independent
  • Trusted
Save up to 70% on staff

News » Telecoms, BPOs are the new targets of SIM swapping hackers

Telecoms, BPOs are the new targets of SIM swapping hackers

Telecoms, BPOs are the new targets of SIM swapping hackers

The telecommunication and Business Process Outsourcing (BPO) industries are the new targets of a persistent intrusion campaign by SIM-swapping hackers. 

Tim Parisi, a researcher at cybersecurity technology company CrowdStrike, said that the end objective of this hacking campaign is to gain access to mobile carrier networks and perform SIM-swapping activities.

The financially motivated attacks have been attributed by the cybersecurity company to an actor tracked as Scattered Spider. Initial access to the target environment is said to be undertaken through a variety of methods ranging from social engineering using phone calls and messages sent via Telegram to impersonate IT personnel.

In an alternative infection chain observed by CrowdStrike, a user’s stolen credentials previously obtained through unknown means were used by the adversary to authenticate to the organization’s Azure tenant.

Another instance involved the exploitation of a now-patched critical remote code execution bug in ForgeRock OpenAM access management solution (CVE-2021-35464) that came under active exploitation last year.

Other attacks also entailed gaining access to the compromised entity’s multi-factor authentication (MFA) console to enroll their own devices and assign them to the users whose credentials had been previously captured.

This technique allowed Scattered Spider to establish a deeper level of persistence through legitimate remote access tools such as AnyDesk, LogMeIn, and ConnectWise Control (formerly ScreenConnect) to avoid raising red flags.

“These campaigns are extremely persistent and brazen,” Parisi noted. 

“Once the adversary is contained or operations are disrupted, they immediately move to target other organizations within the telecom and BPO sectors,” he added.

Read more here.

Start your
journey today

  • Independent
  • Free
  • Transparent

About OA

Outsource Accelerator is the trusted source of independent information, advisory and expert implementation of Business Process Outsourcing (BPO)

The #1 outsourcing authority

Outsource Accelerator offers the world’s leading aggregator marketplace for outsourcing. It specifically provides the conduit between Philippines outsourcing suppliers and the businesses – clients – across the globe.

The Outsource Accelerator website has over 5,000 articles, 350+ podcast episodes, and a comprehensive directory with 900+ BPO companies… all designed to make it easier for clients to learn about – and engage with – outsourcing.

About Derek Gallimore

Derek Gallimore has been in business for 20 years, outsourcing for over eight years, and has been living in Manila (the heart of global outsourcing) since 2014. Derek is the founder and CEO of Outsource Accelerator, and is regarded as a leading expert on all things outsourcing.

“Excellent service for outsourcing advice and expertise for my business.”

Learn more
Banner Image
Get 3 Free Quotes Verified Outsourcing Suppliers
3,000 firms.Just 2 minutes to complete.
Learn more

Connect with over 3,000 outsourcing services providers.

Banner Image

Transform your business with skilled offshore talent.

  • 3,000 firms
  • Simple
  • Transparent
Banner Image