Friend.tech Launches 2FA Feature to Counter SIM-Swap Attacks
Decentralized social media platform Friend.tech has introduced a new two-factor authentication (2FA) feature to protect its users from SIM-swap attacks. In an announcement on October 9, the app’s team revealed that users can now set up a 2FA password on their Friend.tech accounts for enhanced security in case their mobile carrier or email provider is compromised. The platform had previously implemented security updates on October 4, allowing users to add or remove different login methods. However, critics argue that the 2FA feature should have been introduced earlier given the severity and frequency of these attacks.
The Mechanics of SIM-Swap Attacks
Jason Yanowitz, founder of Blockworks, shed light on how SIM-swap attacks are carried out. Attackers send text messages to users, instructing them to change their phone numbers and requiring a “YES” or “NO” response. If the user responds with “NO,” they receive a legitimate verification code from Friend.tech, which the scammer then asks them to forward. Failing to respond within two hours allows the change to be made, putting the account at risk.
Increasing Urgency for Robust Security Measures
The head of Defiant News recently reported that his Friend.tech wallet was emptied due to a sophisticated phishing scam. This incident further emphasizes the need for Friend.tech to implement robust security measures to protect its users’ accounts.