Carrier caught injecting ‘SMS AD’ into Google verification code message [Update: Comment]
June 30, 2021
SMS is widely regarded as an insecure form of two-factor authentication, and another example of this has just emerged. A carrier looks to be injecting ads into the Google verification code used to sign in to services like Gmail.
Update 6/29: Google issued the following statement to us today:
“These are not our ads and we are currently working with the wireless carrier to understand why this…