Threat actors can easily steal one-time passwords sent by text when they conduct a SIM swap attack. This can lead to account takeovers, so users must layer up their security measures.
He Thought He Was Secure; His Phone Number Got Stolen Anyway
Summary + source link. No paywalls, no tracking.