Hello, Today I would like to talk about a new type of tool that a cybercriminal is promoting with their tool to bypass OTP for account security to gain access. This looks like their promoting on Social media and YouTube has started to gather other cyber criminal client to purchase the “OTP BYPASS STORE” which is what the motives is trying to do and its approach.

In conclusion there are many low hanging fruit that a cyber criminal take advantage to either compromise many low security accounts or even websites. These type of crimes is often really low where there is still success when compromising accounts or websites. Avoiding these type of attack such as bypassing OTP, account cracking or PIN/Coupon number enumerating method attack. For an account always stick with 2FA instead of OTP. Often criminals will find many vectors and method to try and bypass alot of ways to compromise anything that can be accomplished.

YouTube account “Johney S” is promoting OTP BOT BYPASS as its trying to avoid YouTube moderatoring detection to get their channel banned or suspended for scam/illegal promoting material. You can see with the video description that the account operating is very active, and is trying to promote other cyber criminals to use this OTP BOT BYPASS tool/script.

PIN/Coupon number enumerating or brute forcing attack. It needs to apply robust authentication should be required before a user can obtain confidential information, and the coupon/voucher number alone should never give access and control. Use an additional authentication factor, such as a PIN code, although these are certainly not foolproof or unbreakable. Adding a CAPTCHA also helps prevent automated checks of card balance.