In this web content, the author discusses their research on weaknesses and attack vectors in password reset options. They highlight a pattern they noticed when resetting passwords on various websites, where part of the phone number is masked in a way that reveals only a few digits. They provide a list of popular websites and the number of digits leaked when resetting a password. The author goes on to explain how they were able to use publicly available data to obtain a target’s full phone number from their email address. They also discuss the potential risks and attack vectors that can arise from this information.
https://www.martinvigo.com/email2phonenumber/