"SEC Confirms SIM Swapping Attack on X Account"

The U.S. Securities and Exchange Commission confirmed that its account was hacked through a SIM-swapping attack, allowing hackers to issue a fake announcement about Bitcoin ETF approval. The attackers tricked the SEC's mobile carrier into porting the phone number to a device under their control, gaining access to the account. The SEC confirmed that multi-factor authentication was not enabled on the account, and advises using hardware security keys or authentication apps instead of SMS for MFA. This incident adds to a series of hacked accounts and malicious advertisements targeting cryptocurrency-related entities.