Sectors

Telecommunications

Documented social engineering incidents targeting the telecommunications sector, sourced and fact-checked.


6 Cases
Documented

Retired General's Phone Records Pretexting Incident (2005-2006)

A phone-record pretexting incident involving a retired U.S. Army general was followed by FTC enforcement and broader privacy-policy scrutiny.

Incident 2005Read →
Documented

Optus/TPG Telecom OTP-Interception Mobile-Upgrade Vishing Fraud (Sydney, 2023-2024)

A Pakistan national in Sydney allegedly ran a vishing scheme impersonating telecommunications support, using maintenance or upgrade pretexts to obtain SMS one-time PINs and fraudulently buy and reroute high-end phones for offshore resale. The investigation identified more than 100 Australian victims, and investigators allegedly found more than AUD $1 million in cash at his home during the November 2024 operation.

Incident 2023Read →
Documented

GCI (Alaska telecom) W-2 phishing: CFO-spoof email drained 2,500+ employees' tax data

A scammer posing as GCI's CFO emailed payroll and, after the employee's initial pushback, persuaded them to hand over 2015 W-2s for every GCI, Denali Media, UUI and Unicom worker.

Incident 2016Read →
Documented

FTC Pretexting Sweep Against Telephone Record Sellers (2006-2008)

Between 2006 and 2008 the FTC pursued six civil cases covering 16 data-broker and private-investigation defendants after two dismissals, alleging they pretexted telecom carriers to obtain and resell consumers' confidential call records. Several matters resulted in permanent injunctions and monetary judgments totaling over $1 million, while the 77 Investigations matter's disposition and collection are not established by the cited sources.

Incident 2006Read →
Documented

Federal Pretexting Prosecutions Post-2006: Bunch and Anderson Charged Under New Anti-Pretexting Statute (2008)

In the first-ever prosecutions under the federal anti-pretexting statute Congress passed after the 2006 HP boardroom spying scandal, Nicholas Shaun Bunch and Vaden Anderson were separately charged in late 2008 with tricking T-Mobile and Sprint/Nextel into handing over customers' confidential call records: one by posing as the account holder with a name and partial Social Security number, the other by serving the carrier a fake federal court subpoena.

Incident 2008Read →
Documented

0ktapus: the 2022 Okta smishing campaign behind the Twilio breach

In 2022, 0ktapus texted staff fake IT alerts linking to Okta lookalikes, stealing 9,931 logins and MFA codes. Twilio was breached; Cloudflare's keys held.

Incident 2022Read →
Explore more

Browse the rest of the library