Worst Phone Hack In US History Puts You At Risk - Act Now!

[@tshinder]

I've been in the cybersecurity business for 30 years - PLEASE do NOT use your phones for anything important. Use your computer for anything sensitive.

[@wildbill4496]

Computers are just as likely if not more likely to be compromised by the average user, who barely knows how to turn on their computer and surf the web.

[@lizadivine3785]

@@tshinder I’m pissed that they FORCE anyone to do anything ONLINE

[@sam12587]

@lizadivine3785 I’m getting to that point too. Pass phrase seems wisest but it has to be a deep personal phrase that no one would guess. My high school ex was locked out of my accts since 98 that way as he knew everything else that the bank needed to verify.

[@killer2600]

Personally, I think the opposite. Mobile OS’es (Android/iOS) are more secure than your Desktop/Laptop OS’es (Windows and MacOS) as they were created from the ground up with security and modern day threats in mind. The real risk with the phone system hack is SMS text messages. They are not private/secure and no one should use it for sensitive things like authentication codes e.g. SMS text code log in verification. This is because the cell network is not secure, traffic can be intercepted/redirected and your phone account/number can be hijacked (sim swapping).

[@lizadivine3785]

@@killer2600 how do they swap your sim?

[@KJFC388]

Most phone companies now offer you a PIN feature that prevents SIM card swap or porting . Call your cell phone company and get this set up. The US government made companies offer this in 2024

[@ryankemp3602]

Thank you, didn’t know this existed. I’m sure there are people out there that think the government mandating this is overreach….which makes no sense.

[@ZaneDouglas1]

Thank you, I wasn't aware of this and I just updated my SIM Pin and enabled SIM protection through Verizon.

[@wildbill4496]

Actually, different providers do this differently, there was no specific way this has to be provided. For most providers SIM protection is either on or off (either you can SIM swap or you can't), not restricted by a PIN code, which would actually be less secure than not allowing it at all. For major providers usually you can log into your account and turn the protection on in your security settings. You can also turn on protection to prevent your phone number from being transferred as well. A hacker would have to know your account password to be able to do a SIM or number swap. If your provider still allows a swap with a simple PIN code then I suggest you find a new provider.

[@vallang4832]

The new I phones do not have SIM cards.

[@joannac9194]

I put a lock on my cellphone’s SIM card.

[@Ed-ym4tu]

I'm not sure recommending a password manager is a good idea. Reusing the same password is clearly terrible, but a password manager can be hacked and then they have access to everything you use online. Using pass phrases you can easily remember is a better choice.

[@caroleanne8529]

I have wondered the same thing.

[@MsHojat]

I think your argument is rather misleading. For one thing password managers generally have a good reputation of not having holes that have been exploited. Particularly on a mobile the system is so secure that it's nearly impossible to get control over other apps like that. Secondly, password managers aren't common enough (at least currently) such that malware would want to try to deal with it. But most importantly, if a user's device is compromised there's all sorts of things that can be done that puts the user in a terrible situation regardless of what they've done. Like with no password manager a token sniffer and keylogger will generally collect all the accounts anyway unless it's an account that the user rarely/never uses.

[@mariakristinahawl1640]

I'm old fashioned. Paperwork bank statements and go to the bank for any transactions. I don't use a debit card, I have refused it from all my banks. I either use credit, checks, or sometimes cash. I have no reason to check my balance except once monthly on statements. I don't spend more than I make, so I don't live paycheck to paycheck that I require knowledge of my daily balance. One less stress to deal with. My cell phone has data turned off. It's only used for voice, simple texts (no links to click or send), and pictures.

[@RedEyeC]

Can't even do paper statements anymore if you receive your mail anywhere else but a PO box. US mail theft is rampant.

[@wingandhog]

5:43 you can have your carrier lock your account to prevent phone port over to a new service. I had mine done and the only way to unlock it is with a visit to the cell phone store and authenticate who I am.

[@AzulWells]

Super helpful. Thank you for sharing this with us. Did you have to go to the store in-person to set it up initially? 🙏 Azul

[@TimesandGens]

@@AzulWells With T-Mobile I had to SIM lock online, but had to call to PORT Lock which was a hassle, and a long time on phone.

[@MrAxman53]

But what if a cell phone store employee is being paid off to fraudulently tick the boxes saying you showed up and authenticated yourself? (Ask me how I know...)

[@killer2600]

That protects against sim swapping but doesn’t stop the ability to intercept SMS text messages. Sim swapping is a social engineering hack whereas interception is done by hacking the phone network/companies system as was done to Verizon, AT&T, and allegedly others.

[@K8Steve]

The SIM card swap to get your two factor authentication code is very scary. If the financial institution of interest will still give you automated phone calls, and you have a landline, have the two factor authentication go there and keep your mobile numbers out of their records.

[@Lynne2106]

What if the password manager gets hacked?

[@JRH6025]

THATS WY I DONT DO ON LINE BANKING. THINK OLD SCHOOL

[@Andrew-zs5tc]

I wish you had talked about the risk of contacting the "Financial Advisors" that are mentioned in the comments to your videos and most other financial KZbin videos.

[@stanmarcusgtv]

it's very annoying and is found on multiple channels - report them as "misinformation" - it appears to be an organized effort

[@foreign_agent]

Azul would probably love to, but he knows that comments (any comments) help with video rankings on KZbin...

[@johnkola6475]

starting to wonder if this is part of azul's marketing tactics for advisors in the comments.....

[@fredflintstone2234]

I know. SO ANNOYING and Azul must be aware that these scammers are all over his videos!

[@AnimationByDylan]

These not posts are amazingly obvious and never stopped. KZbin is complicit as are the channels. If you’re seeing these on a channel, unsubscribe.

[@theowl3756]

Changing some security configurations on the phone or computer is not the real answer. Cyber threats and Scammers must be dealt with serious military threats.

[@414s4]

Not true anymore on iPhone to android messages being unencrypted, changed with I think iOS 18.1

[@probuilder961]

I just activated the VIP Access app on my phone for 2FA, vs SMS text codes which can be hacked. Also, I only use a dedicated computer for brokerage website access.

[@James-ke5sx]

Personally I don't use my phone for banking. I have a separate military grade tablet that I use for banking and I use the official banking app. I never use a browser in this tablet and I don't open email Etc

[@MsHojat]

I think you're maybe missing the point/issue/threat here. That or maybe weren't clear what you meant. You don't need to use your phone for banking to fall victim to this. All that is necessary is for the bank to know your mobile phone number and for them to use it as a recovery; oftentimes you banks will _require_ such a phone number and you won't have an option to say no. Granted maybe you use a bank where it is not forced on you and they do not have you mobile phone number.

[@aliceclearmanphd984]

I almost wish I were Amish. Almost. :: sigh ::

[@solyluna1778]

Been wondering if they would accept me too! 🙋

[@pammypoo3003]

😂

[@mercyme8014]

You can be an intentional luddite.

[@caroleanne8529]

I heard that the Amish can use cell phones for "business." Do not know if that is true, but it makes sense that having a business would be difficult without the use of a cell phone.

[@Original22]

They have there own problems too

[@susanscheller9570]

What about the code number that most financial institutions send you in order to get in. Does that not help secure from someone else from using your account?

[@victorpetrenko2736]

Dear Susan, it does not guarantee hackers-free experiences. Bc they can steal your phone number to put it use on a phone device they have. So when the bank sends the code to your phone number, it is hackers who receive that code, not you. So called sIM swapping scam. Only possible if hackers can convince your phone service provider to transfer the Number from the existing device (yours) to a new device ( theirs). As that is not any fault from your bank, bank is usually will not compensate you. So, insistin on your telecom provider to have a secret pin ( only you would know) which will be required to transfer the Number. I hope that was a clear expiation

[@wildbill4496]

It's better than nothing, but its only as secure as what method is being used to send/receive that code. If it's via text message then you need to make sure SIM protection is enabled with your phone provider, to prevent SIM swapping.

[@killer2600]

That is the risk everyone is trying to warn you about. There’s no guarantee that you’re the only one that can receive that code. With sim swapping or this latest disclosed phone system hack, anyone that wants to get that SMS code can and if they can it really doesn’t do the job of proving that you (the person logging in) are you. The use of SMS verification codes should be dropped and replaced with newer, better, and proven authentication methods like OATH-TOTP (6-digit codes that change every 30 seconds), FIDO security keys, and/or Passkeys.

[@Dbb277-2]

@@wildbill4496 how do you do that?

[@pattiprosperoella3244]

Thank you.❤❤❤

[@davidpowell3347]

Best not to use over the air Internet or cellphone for financial business access "two factor authentication" if done via text and cellphone is worse than useless (might be O.K. if done over landline phone) when connecting laptop or tower computer to financial business login best to turn on "airplane mode" (no wifi) and run on wired Ethernet from router with Vanguard or some banks can turn on additional security challenges when "logon from unknown computer"

[@wildbill4496]

Cellphone data over your providers network (like 5G) is actually encrypted and at least as secure as a land line connection. It's when you use public WiFi hotspots like at a public mall that you put yourself at risk. Of course whether via something like 5G or land line internet, once you leave your providers network, your data is traveling through 3rd party network devices until it reaches whatever website or online functionality you are connecting to. Even using a VPN only secures the data between you and your VPN provider. That's why any legit financial institution will encrypt data between their servers and whatever device you are using to access it, that way even your VPN provider couldnt read your data.

[@rayfellers]

It took exactly 2 minutes and 4 seconds to realize this was taking way too long to get to the point.

[@pauldionne2884]

Fidelity will be happy to know their mobile app commercial preceded your video.

[@KillDeathRatioDJ]

Well, SMS is unencrypted to begin with this, the the warning about ios to android and vice verse is sorta null/void BUT carries some weight cause RCS is supposed to be enabled but if I recall correctly the RCS profile in use doesnt encrypt them to android either?

[@teresarose1038]

Good information thank you

[@playlistalaska5611]

Use a FIDO compatible security key-think Yubikey!

[@FarmerRiddick]

I'm ordering my sets at the end of the month. In addition, I'm thinking about a dedicated cheap secondhand laptop just for banking and other secure things, that is going to have a Linux OS and a VPN on it. There is a few other things I'm going to try with this "paranoid scheme", like a secondary Linux OS called TAILS, that loads from a USB drive onto the RAM only, with a mobile Hotspot, when I'm out in the wild, like traveling. The Hotspot would mask what's behind it. No public WiFi for me if I can help it hence, the TAILS OS just in case.

[@dianep6791]

I routinely use my home phone/land line phone to receive 2 part authentication.

[@ericcaldwell3584]

Why is it specific to Android to iPhone or iPhone to Android? What about Windows phone or Linux phone or anything else?

[@0r14n583lt]

most 2FA protocols are extremely flawed.

[@LisaSimplified]

Thank you!

[@markcohen4599]

You really need to police your comment section for crypto scammers. Unless you want to lose subs and possibly get demonetized.

[@patpeifer7871]

Agree. All types of financial scammers. I report them on KZbin and on the Yahoo comments section as spam. Occasionally, Yahoo does delete them. But I think on KZbin the channel owner should delete them.

[@Aerik]

Report them when you see them. It hides them from your and other peoples views. It also can lead to the spam accounts getting banned.

[@tommyebay]

Have never and will never use my phone to look at any bank/financial institution, that's what my desktop is for

[@wingandhog]

I pulled all financial apps off my iPhone. I do use my iPad which is not cell capable

[@SailingTeamTallyHo]

The problem is that two factor authentications (TFA or 2FA) are usually sent via mobile phone even if you are using the banking app on your desktop

[@papasquat355]

@@SailingTeamTallyHo Yep. Sim swaps and email takeovers make MFA virtually worthless. We are at a point that fingerprint and facial recognition are the best (still not foolproof) security.

[@commonsense-og1gz]

@papasquat355 as for fingerprint this is true, but facial recognition is something i wouldn't know since pictures of oneself are also online. someone might be able to use a picture to gain entry into your accounts.

[@wingandhog]

@papasquat355 … seriously looking at getting a Yubikey

[@jodyknowlton6775]

I use Face ID

[@jstrat121]

Face ID is only “ local” to your phone ,has nothing to do with this hacking….just makes easier for YOU to login to app

[@jeffb5798]

If you were surprised to hear that texts are sent in the clear, well, are you aware that e-mail is transmitted in the clear (unencrypted)?

[@SailingTeamTallyHo]

its possible to encrypt emails of course but most people don't

[@dougprw1110]

That's not true. Gmail is encrypted by default. Also, iMessage is also encrypted by default unless you are sending or receiving from non-iphone users.

[@fredwinslow744]

i have emr in medical clinic and i can’t follow what you are saying you me thin two factor authentication don’t explain what it is if it’s good or bad. totally confusing to viewer saying be.careful is as useful as a dr saying be healthy with. no info or input

[@280zone]

Your sound levels are still weak.

[@mdomnis]

Slightly improved with the mic, but still not quite as it should be.

[@webthirtythreenoname7259]

Change your phone or check your ears, especially if you're used to headphones or ear buds

[@meanjeanslo]

I can hear him just fine. It might be on your end.

[@OldManDave1960]

I have no problem hearing everything he's saying

[@rdavidwebb]

Great job nsa and fbi you guys are top notch. *clap clap clap* What do we pay you for. Our government has gone stupid, it's like biden's stupidity spread all through the government.

[@fredwinslow744]

i have emr in medical clinic and i can’t follow what you are saying you me thin two factor authentication don’t explain what it is if it’s good or bad. totally confusing to viewer saying be.careful is as useful as a dr saying be healthy with. no info or input be careful unzipping uh what ? how ? dropped the ball on this video mostly your people watching age just more worried land more paralyzed your videos are generally good

[@eemedra]

Is your background AI

[@lizadivine3785]

There is no way I would ever use a password manager

[@barbiec4312]

Curious. Why?

[@lizadivine3785]

@barbie4312 because the hackers get them all in one place. Smorgasbord.

[@Lynne2106]

The password manager can be hacked

[@Keepmoving-y7c]

I feel same way. And I never let a system or the phone save m passwords. I use different userids and passwords on different accounts.

[@mikecarr1484]

You are so far from the truth. Almkst every computer i have used in the past ten years is effected by some virus or spam ware. Mobile phones are the most secure out of everything since only you use it.

[@deborahlarson2650]

Your volume is too low

[@IbrahimKone-ix4qi]

I am at the beginning of my "investment journey", planning to put 385K into dividend stocks so that I will be making up to 30% annually in dividend returns. any good recommendation on great performing stocks or Crypto will be appreciated!!

[@IbrahimKone-ix4qi]

how would you recommend i enter the crypto market? I am also looking at studying some traders and copying their strategy rather than investing myself and losing money emotionally.. What's your take on this approach? and How can i reach her, if you don't mind me asking?

[@IbrahimKone-ix4qi]

I've just look up her full name on my browser and found her webpage without sweat, very much appreciate this.

[@eflvin]

Sure, and my dog eats ceramic tile

[@fredflintstone2234]

SCAMMERS

[@HenryErickson]

Stick to financial advice. So long unsubscribing

[@gregwessels7205]

I unsubbed a while ago but channel still gets recommended so here I am. 🤷‍♂

[@khrcar6596]

Tha heck do ya mean..?!?

[@scottlevine7646]

Sorry, Azul. Unsubscribing. You’ve veered away from financial advice into fear mongering. I’m so disappointed.

[@WSK9778]

Not fear-mongering this is happening to peeps.

[@lnxguit]

Believe me, this is financial advice

[@DivineLightPaladin]

Your accounts and thus, finances aren't protected well enough if you think this is fear mongering