http://ainita2ucg473h7tjp3j32fu6wabxtrk2lrz6hauystamloiap3a4did.onion/iranian-gov-hackers-intercept-2fa-via-sms-to-access-activist-accounts
Then they send a 2FA request, usually in very early mornings when target is sleep, using the victim's phone number. As they have full access to the country's mobile operator networks, they intercept the 6 digit code sent by Google: Hacker choose Password Recovery Hacker sees OTP, and clicks on "try another way" Hacker enters the mobile number of the Victim and request a code via SMS Hacker enters the victim's mobile number, intercept the SMS on operator,...