topic Re: Unauthorized SIM Swapping (Koodo prepaid) in The Lounge

Unauthorized SIM Swapping (Koodo prepaid)

Kristowhy — Sat, 05 Nov 2022 20:11:06 GMT

This is a head's up for anyone here who has or knows others with a Koodo prepaid account to be on the lookout for possible unauthorized SIM swapping of their account.

So far 3 different Koodo prepaid users have been affected by the SIM swapping attacks which took place just a few days ago. According to one affected user, an internal investigation has begun.

For more info/details check out this thread:

https://community.koodomobile.com/prepaid-79951/unauthorized-sim-swap-on-koodo-prepaid-7814679

PS: Make sure 2FA (2 factor authentication) is enabled on your PM account in addition to having a strong password. 2FA should also be enabled on the email account (Google, Outlook, etc) used for your PM account as well.

Re: Unauthorized SIM Swapping (Koodo prepaid)

softech — Sun, 06 Nov 2022 00:20:24 GMT

second time in 3 days, it looks like a targeted attack.. or there are some unsafe apps on the phone?

Anyway, better be very safe and be careful

Thanks for the heads up @Kristowhy

Re: Unauthorized SIM Swapping (Koodo prepaid)

Kristowhy — Sun, 06 Nov 2022 00:40:28 GMT

@softech wrote:
second time in 3 days, it looks like a targeted attack.. or there are some unsafe apps on the phone?

Hard to say, but what's concerning to me is that two of the users did not receive any emails with the 2FA codes that should be sent out when a SIM card change is done via the online account. It seems they just received the email notifications that a SIM change was done and nothing else. 😐

Koodo/Telus really needs to upgrade the Koodo prepaid selfserve site ASAP with 2FA like we have here with PM.

Re: Unauthorized SIM Swapping (Koodo prepaid)

Community_QA — Sun, 06 Nov 2022 04:36:29 GMT

@Kristowhy Koodo still has no 2FA? did Koodo update their Self serve like us?

Re: Unauthorized SIM Swapping (Koodo prepaid)

BKNS27 — Sun, 06 Nov 2022 06:44:15 GMT

@Kristowhy

It could have been an inexperienced Koodo operator that didn’t complete the credentials screening.

Good thing PM have a 2FA and online chat and private messaging to screen all credentials before allow access to accounts. Also not under pressure over the phone to allow for SIM swapping.

But nothing is full proof though.

Re: Unauthorized SIM Swapping (Koodo prepaid)

Kristowhy — Tue, 08 Nov 2022 04:48:41 GMT

@softech here are another two victims in another thread. Yikes!

https://community.koodomobile.com/other-80596/account-hacked-sim-swap-7814829

First user their email was hacked. Second user their SIM was changed without any warning or confirmations. Both used Newton (crypto) and suffered financial losses. 😐

Re: Unauthorized SIM Swapping (Koodo prepaid)

Kristowhy — Fri, 11 Nov 2022 19:27:57 GMT

@softech @darlicious

UPDATE: the main thread (in my OP) has been further updated by those involved with some pretty eye opening contents... 😲

Re: Unauthorized SIM Swapping (Koodo prepaid)

BKNS27 — Fri, 11 Nov 2022 19:32:11 GMT

Inside job then

Re: Unauthorized SIM Swapping (Koodo prepaid)

softech — Fri, 11 Nov 2022 19:57:39 GMT

thanks @Kristowhy for the update

Now, I hope PM and Koodo are using a separate call centres and they will start hiring "smarter" reps

Re: Unauthorized SIM Swapping (Koodo prepaid)

Kristowhy — Fri, 11 Nov 2022 19:45:29 GMT

@BKNS27 yeah a few affected users were saying that days ago...it's entirely possible.

@softech yeah fingers crossed! No matter how much security tech is implemented, the weakest link always involves people.

Re: Unauthorized SIM Swapping (Koodo prepaid)

gpixel — Sun, 13 Nov 2022 09:11:51 GMT

I suggest everyone to change their passwords. there could be a new security breach with credentials leaked. the same thing happened back in feb/2020. PM still hasn't said anything, but we were directly affected by it. that is why all these new security features were implemented into PM. the issues the customers are having are very similar to the issues we had here.

this could also explain PMs system outage. these dates seem to be very close to eachother...

Re: Unauthorized SIM Swapping (Koodo prepaid)

Kristowhy — Wed, 23 Nov 2022 05:08:24 GMT

Sadly this situation seems to be getting worse as the weeks roll by with more victims posting. One affected user has now moved all his business and lines away from Telus.

The recent updates in the thread below are quite alarming!

https://community.koodomobile.com/prepaid-79951/unauthorized-sim-swap-on-koodo-prepaid-7814679/index2.html

Re: Unauthorized SIM Swapping (Koodo prepaid)

gpixel — Thu, 24 Nov 2022 01:15:43 GMT

Re: Unauthorized SIM Swapping (Koodo prepaid)

Kristowhy — Tue, 06 Dec 2022 17:23:27 GMT

After about 4 week from these incidents, Telus/Koodo has finally rolled out 2FA like we have here at PM. A step in the right direction...yay!

What's also interesting is that the Koodo prepaid selfserve site is now identical to that of PM....but with slightly different shading and pics.