The most dangerous crypto attack needs no malware, no cracked password and no exchange hack. It needs one phone call. In a SIM-swap attack, a criminal convinces your mobile carrier to move your phone number onto a SIM card they control. From that moment, every call and text meant for you — including the SMS codes that guard your email and exchange accounts — goes to the attacker...
