deray mckesson@deray

I was hacked today: my Twitter account, two email addresses, & my phone. It was not due to passwords, they hacked my phone account itself.

Fri, Jun 10 2016 19:45:02

ReplyRetweetFavorite

https://twitter.com/deray/status/741355511224913920

— deray mckesson (@deray)Fri, Jun 10 2016 19:45:02

deray mckesson@deray

At 10:31 am, someone called @verizon impersonating me and successfully changed my SIM & unsuccessfully attempted to change my phone number.

Fri, Jun 10 2016 19:46:24

ReplyRetweetFavorite

https://twitter.com/deray/status/741355856420319233

— deray mckesson (@deray)Fri, Jun 10 2016 19:46:24

deray mckesson@deray

By calling @verizon and successfully changing my phone's SIM, the hacker bypassed two-factor verification which I have on all accounts.

Fri, Jun 10 2016 19:47:33

ReplyRetweetFavorite

https://twitter.com/deray/status/741356147479842816

— deray mckesson (@deray)Fri, Jun 10 2016 19:47:33

deray mckesson@deray

Today I learned that it is rather easy for someone to call the provider & change your SIM. The hacker got the account verification texts.

Fri, Jun 10 2016 19:48:49

ReplyRetweetFavorite

https://twitter.com/deray/status/741356462610513920

— deray mckesson (@deray)Fri, Jun 10 2016 19:48:49

deray mckesson@deray

The staff from @twitter were incredibly helpful once alerted and helped to both delete some of the hacked tweets and give me back access.

Fri, Jun 10 2016 19:52:35

ReplyRetweetFavorite

https://twitter.com/deray/status/741357412515491840

— deray mckesson (@deray)Fri, Jun 10 2016 19:52:35

deray mckesson@deray

Verizon recorded the call made this morning by the imposter and we are working with lawyers to get the recording. It's been a long day.

Fri, Jun 10 2016 19:53:28

ReplyRetweetFavorite

https://twitter.com/deray/status/741357633530122240

— deray mckesson (@deray)Fri, Jun 10 2016 19:53:28

deray mckesson@deray

No, I do not endorse Trump as the next President. He cannot be the President of the United States. He is racist & a bigot, unfit to lead.

Fri, Jun 10 2016 19:54:25

ReplyRetweetFavorite

https://twitter.com/deray/status/741357871800197120

— deray mckesson (@deray)Fri, Jun 10 2016 19:54:25

deray mckesson@deray

They simply needed to last four digits of my social security number to gain full access to my @verizon account.  https://twitter.com/kona99/status/741358047512121344 …

Fri, Jun 10 2016 19:56:43

ReplyRetweetFavorite

https://twitter.com/deray/status/741358452895801344

— deray mckesson (@deray)Fri, Jun 10 2016 19:56:43

deray mckesson@deray

I'm not sure. But they knew it. @verizon has other safeguards now in place so that it doesn't happen again.  https://twitter.com/chase_luchiano/status/741356840836042752 …

Fri, Jun 10 2016 19:59:24

ReplyRetweetFavorite

https://twitter.com/deray/status/741359127104913408

— deray mckesson (@deray)Fri, Jun 10 2016 19:59:24

deray mckesson@deray

The hacker got access by changing my SIM which redirected texts, then resetting my passwords to trigger two-factor authentication. Intense.

Fri, Jun 10 2016 20:02:21

ReplyRetweetFavorite

https://twitter.com/deray/status/741359869828190209

— deray mckesson (@deray)Fri, Jun 10 2016 20:02:21

deray mckesson@deray

They didn't need the passwords up front. They changed the SIM, reset the passwords, got the codes, reset passwords.  https://twitter.com/sneakdotberlin/status/741362099624902656 …

Fri, Jun 10 2016 20:12:52

ReplyRetweetFavorite

https://twitter.com/deray/status/741362515997773824

— deray mckesson (@deray)Fri, Jun 10 2016 20:12:52