![\"\"](\"https:\/\/www.cryptocabaret.com\/wp-content\/uploads\/2023\/04\/shutterstock_1609909558-768x432.jpg\")
<\/p>\n<\/p>\n
Cybercriminals have reportedly breached AT&T email accounts and are using the access gained to steal crypto assets from their victims. While a spokesperson for AT&T has denied claims that hackers have gained access to the company\u2019s internal systems, a report suggests that as much as $20 million worth of crypto may have been stolen.<\/strong><\/p>\n Cybercriminals have reportedly gained access to AT&T email accounts and are using this to hack into targeted victims\u2019 crypto exchange accounts. According to a Techcrunch report, the criminals using this modus operandi may have stolen crypto assets worth between $15 million and $20 million.<\/p>\n Although two victims are said to have confirmed the theft, a spokesperson for AT&T has in the meantime rejected suggestions that criminals have gained access to the company\u2019s internal systems.<\/p>\n \u201cThere was no intrusion into any system for this exploit. The bad actors used an API access,\u201d said Jim Kimberly, the spokesperson for AT&T.<\/p>\n<\/p>\n As explained in the Techcrunch report, unknown parties are thought to have found a way of hacking into personal AT&T email accounts that use att.net, sbcglobal.net, and bellsouth.net addresses. To achieve this, the hackers reportedly use access to the telecommunication company\u2019s internal network which then enables them to create mail keys for any user.<\/p>\n Having gained a targeted person\u2019s keys, the criminals are then able to login and reset the victim\u2019s passwords including those on crypto exchange apps. To prove that cybercriminals have indeed gained access to AT&T\u2019s internal systems, a whistleblower is said to have shared a list of the hackers\u2019 alleged victims.<\/p>\n While AT&T has acknowledged the \u201cunauthorized creation of secure mail keys,\u201d the spokesperson insisted that the company had responded to this by updating its security controls. The company said it has locked some email accounts to force the owners to reset passwords.<\/p>\nCriminals \u2018Used an API Access\u2019<\/h2>\n