Iranian hackers overcome with phishing the double factor verification by SMS of Gmail and Yahoo: time to look for alternatives
One of the most common tips when it comes to Internet security when we talk about authentication on websites and services is the use of two-step verification, which usually uses the smartphone with verifying element, with SMS as the main means to receive a second unique key that gives access to the service. However, as has already been demonstrated on some other occasion, "classic" security measures are becoming less infallible, and in this case the same thing happens. A group of researchers from Certfa Lab has published a study that explains how Iranian hackers, allegedly in charge of the eastern country's executive, have attacked US officials, journalists and activists. In the attack has had much prominence, as almost always, email. But the enabling part of hacking, according to researchers, is double-factor authentication, which in some cases can be very safe, but in others it does not offer the level of yesteryear. The Iranian hacker group did nothing too new. Fir...