Over the past few days, several friendtech content creators have reported being hacked and their assets being stolen- and it seems that the attack spree isn’t over.
The modus operandi seems to be quite similar for several of the attacks.
It begins with a SIM swap, which grants the attacker access to the victim’s phone number, which is often used to sign in to their friendtech account. The attacker then sells all the keys that the victim holds for Ether, and transfers all the Ether into a wallet controlled by the attacker.
Since then, FriendTech has tried to improve on its security, and allow users to manage their sign in methods.
But this could prove cold comfort to those who have already lost their keys and suffered reputational damage- after all, the new changes can help users moving forward, but offer nothing to help those who have already suffered.
The problem, at its core, is not localised to FriendTech. Instead, FriendTech is merely a symptom of the wider problem- relying on Web2 security practices for Web3.
Alex
