Can someone explain this attack a bit clearer please?
If my server is sending a 2FA to a mobile number, then I control the number and the content of the message, so how does the attacker send to blocks of numbers and profit from the traffic (I'm guessing they need to put a link in the message?)
Does it only happen with poorly written forms that have no validation so the attacker can control the target number and the message that gets sent?
If my server is sending a 2FA to a mobile number, then I control the number and the content of the message, so how does the attacker send to blocks of numbers and profit from the traffic (I'm guessing they need to put a link in the message?)
Does it only happen with poorly written forms that have no validation so the attacker can control the target number and the message that gets sent?