Unverified50% confidenceFactExact time
SIM卡交换攻击（SIM Swapping）是指攻击者通过社会工程学手段说服运营商将受害者手机号转移到攻击者控制的SIM卡上，从而劫持基于短信验证码的二次认证
1
Sources
50%
Confidence
Long-term
Relevance
8/4/2026
First Seen
Sources
Related Claims
UnverifiedSources of redemption codes in underground cybercrime markets include bulk purchasing of legitimate subscriptions for resale using leaked credit card information, registering via bot account networks to obtain promotional benefits, and reselling stolen accounts.57% similarUnverifiedQR code access carries security risks including replay attacks, session credential leakage due to long-lived tokens, and man-in-the-middle attacks.57% similarUnverified攻击者利用AI幻觉出的包名，提前在npm、PyPI等包注册表抢注并植入恶意代码，这种攻击手法被称为slopsquatting57% similarUnverified攻击者获取访问权限后可能立即绑定自己的2FA设备将原账号主人锁出，此操作被称为账号接管（Account Takeover，ATO）56% similarUnverifiedCredential stuffing attacks refer to attackers automatically attempting to use username-password combinations leaked from one breach to log in to other websites in order to take over accounts.55% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/685538API
curl https://kongchang.com/api/v1/knowledge/claims/685538MCP
get_claim(id=685538)