Serial Thief Steals Thousands Using Cellphones (and Credit Cards) from Gym Locker Rooms

Long-time Slashdot reader n3hat writes: The BBC reports that a thief has been emptying gym patrons' accounts by stealing their bank card and mobile phone, registering the account to the thief's own mobile, and emptying the victims' bank accounts. The thief works around 2-factor authentication by taking advantage of the victim's phone having been configured to show notifications on the lock screen, so the thief can view the 2FA credential even though they don't have the unlock code. The article gives instructions on how to disable notifications on the lock screen, for both iPhone and Android.

Read more of this story at Slashdot.