Twilio Hit by Cyber ​​Attack, 33 Million Authy Users' Phone Numbers Stolen by Hackers!

Todaysgist.com, Jakarta – Twilio, a cloud communications service provider, has just revealed that it has been the victim of a cyber attack by an unknown hacker.

Twilio said the attackers exploited an unauthenticated endpoint in the Authy app.

Through this security hole, hackers can identify data related to Authy accounts, including the user's mobile phone number.

Quoting The Hacker News, Thursday (4/7/2024), the company has taken steps to secure the security gap so that it no longer receives unauthenticated requests.

News that Twilio had fallen victim to a cyberattack emerged after someone named ShinyHunter, the cyberattack perpetrator, published the stolen database.

In his post on BreachForums, the hacker claimed to have stolen a database containing 33 million phone numbers allegedly taken from Authy user accounts.

“We have seen no evidence that the threat actor gained access to Twilio systems, or other sensitive data,” the company said in a July 1, 2024, security alert.

However, out of caution, the company recommends that users upgrade their Android (version 25.1.0 or later) and iOS (version 26.1.0 or later) apps to the latest versions.

“Threat actors may try to use phone numbers associated with Authy accounts for phishing and smishing attacks, so all users should raise awareness around the texts they receive,” he said.

For some people, Authy, which is a popular two-factor authentication (2FA) application, must be familiar.

It is known that Twilio bought Authy since 2015 and has become a popular 2FA application in the world by offering an additional layer of account security.