Technique
technique:password_recovery
Also: password reset
Account recovery process abused through SMS verification after the attacker took control of Miles’s phone number.
Account recovery process abused through SMS verification after the attacker took control of Miles’s phone number.
“proceeded to do a password recovery on his Gmail account”
“You can issue password resets on pretty much any other account they have”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | INVOLVES | The Pizza Problem | Explicit | 97 |
The Pizza Problem INVOLVES Password recovery
After the SIM swap, the attacker used password recovery to reset Miles’s Gmail password and reach other accounts.
Explicit Confidence 99% · Jack Rhysider EP 97 Details
“proceeded to do a password recovery on his Gmail account”