Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

Hacker Pleads Guilty to SIM Swapping Attacks, Cryptocurrency Theft

A Rockport, Massachusetts, man has pleaded guilty over his role in a scheme targeting people who had high-value social media accounts or who were believed to have large amounts of cryptocurrency.

A Rockport, Massachusetts, man has pleaded guilty over his role in a scheme targeting people who had high-value social media accounts or who were believed to have large amounts of cryptocurrency.

The man, Declan Harrington, 21, together with co-conspirator Eric Meiggs and others, targeted people who were believed to have significant amounts of cryptocurrency or high-value social media accounts, also referred to as OG (Original Gangster) accounts, through a method called SIM swapping.

Through this technique, attackers impersonate their intended victims in conversations with their phone services providers to trick operators into transferring the victims’ phone numbers to SIM cards in the attackers’ possession.

Being in control of the SIM card, the attackers then attempt to hijack the victim’s online accounts by initiating password change procedures and requesting validation codes or other authentication codes to be sent to the phone numbers the attackers now control.

Harrington, Meiggs, and co-conspirators targeted at least 10 victims in the United States to steal or attempt to steal over $530,000 in cryptocurrency.

Meiggs, who pleaded guilty on April 28, took control of two victims’ OG accounts on social media platforms. He is scheduled for sentencing on May 24, 2022.

Harrington pleaded guilty to one count of conspiracy, one count of computer fraud and abuse, five counts of wire fraud, and one count of aggravated identity theft. He could be sentenced to up to 20 years in prison and ordered to pay a fine of up to $250,000 for the charges of wire fraud.

Related: 21-Year-Old Woman Pleads Guilty to Sending Phishing Emails to Political Candidates

Advertisement. Scroll to continue reading.

Related: Estonian Botnet Operator Pleads Guilty in U.S. Court

Related: Hacker Who Sold UPMC Employee Information Pleads Guilty

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Mike Dube has joined cloud security company Aqua Security as CRO.

Cody Barrow has been appointed as CEO of threat intelligence company EclecticIQ.

Shay Mowlem has been named CMO of runtime and application security company Contrast Security.

More People On The Move

Expert Insights

Related Content

Cybercrime

A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...

Cybercrime

The changing nature of what we still generally call ransomware will continue through 2023, driven by three primary conditions.

Cybercrime

As it evolves, web3 will contain and increase all the security issues of web2 – and perhaps add a few more.

Cybercrime

Luxury retailer Neiman Marcus Group informed some customers last week that their online accounts had been breached by hackers.

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Cybercrime

Patch Tuesday: Microsoft calls attention to a series of zero-day remote code execution attacks hitting its Office productivity suite.

Artificial Intelligence

The release of OpenAI’s ChatGPT in late 2022 has demonstrated the potential of AI for both good and bad.

Cybercrime

Satellite TV giant Dish Network confirmed that a recent outage was the result of a cyberattack and admitted that data was stolen.