Member login - User Registration - Set as homepage - 加入收藏 - 网站地图 Twitter hack: 130 accounts targeted in attack!

Twitter hack: 130 accounts targeted in attack

time:2023-06-02 19:22:34 source:Al Jazeera author:Press center 1 read:327order

Twitter hack: 130 accounts targeted in attack

  • Published
Share pageAbout sharing
A photo illustration shows a range of celebrities - Kim Kardashian, Joe Biden, Elon Musk, Barack Obama, Kanye WEst, and Jeff Bezos - arrayed around a shattered glass image with the Twitter logo at its cetnreImage source, Reuters / AFP
By Joe Tidy & David MolloyTechnology reporters

Twitter says 130 accounts were targeted in a major cyber-attack of celebrity accounts two days ago.

However, Twitter says only a "small subset" of those 130 accounts had control seized by the attacker.

The security breach saw accounts including those of Barack Obama, Elon Musk, Kanye West and Bill Gates tweet a Bitcoin scam to millions of followers.

Twitter said it was still trying to work out if private data - which could include direct messages - was stolen.

"We're working with impacted account-owners and will continue to do so over the next several days," the company said, through its official support account.

"We are continuing to assess whether non-public data related to these accounts was compromised," it added.

The FBI is now investigating.

What happened?

On 15 July, a number of Bitcoin-related accounts began tweeting what appeared to be a simple Bitcoin scam, promising to "give back" to the community by doubling any Bitcoin sent to their address.

Then, the apparent scam spread to mainstream celebrity accounts such as Kim Kardashian West and former vice-president Joe Biden, and those of corporations Apple and Uber.

Twitter scrambled to contain the unprecedented attack, temporarily preventing all verified users - those with a blue tick on their accounts - from tweeting.

Attackers were able to bypass account security because they had somehow gained access to Twitter's own internal administration tools.

  • Listen to Tech Tent: The big Twitter hack
  • Twitter hack: What went wrong and why it matters
  • What is Bitcoin?

However, US President Donald Trump, one of the most prominent Twitter users, was unaffected.

There has been speculation for some time that President Trump has extra protections in place after his account was deactivated by an employee on their last day of work in 2017.

The New York Times confirmed that was how Mr Trump's account escaped the attack, citing an anonymous White House official and a separate Twitter employee.

Despite the fact that the scam was obvious to some, the attackers received hundreds of transfers, worth more than $100,000 (£80,000).

What do we know about the attackers?

Bitcoin is extremely hard to trace and the three separate crypto-currency wallets that the cyber-criminals used have already been emptied.

The digital money is likely to be split into smaller amounts and run through so-called "mixer" or "tumbler" services to make it even harder to trace back to the attackers.

Media caption,

Bitcoin explained: How do cryptocurrencies work?

Clues about those responsible are surfacing through bragging on social media - including on Twitter itself.

Earlier this week, researchers at cyber-crime intelligence firm Hudson Rock spotted an advert on a hacker forum claiming to be able to steal any Twitter account by changing the email address to which it is linked.

The seller also posted a screenshot of the panel usually reserved for high-level Twitter employees. It appeared to allow full control of adding an email to an account or "detaching" existing ones.

Image caption, Hackers posted the view from the Twitter control panel

This means that the attackers had access to the back end of Twitter at least 36-48 hours before the Bitcoin scams began appearing on Wednesday evening.

The researchers have also linked at least one Twitter account to the hack, which has now been suspended.

The concern is that this hack might not be over if the attackers copied - and still possess the private Direct Messages of the accounts over which they took control.

"Bitcoin scam is a misguided way to frame this incident," Roi Carthy, CEO of Hudson Rock said.

"If anything, the 'scam' part supports the conclusion that the group behind the attack was, to Twitter's luck, unsophisticated. The incident can either be characterised as an account take-over campaign for sale on the Darkweb, or a data breach to get a hold of Direct Messages for malicious purposes."

Do the hackers have DMs?

Twitter says it is still looking into "what other malicious activity they may have conducted or information they may have accessed".

The private messages of Kanye West, Kim Kardashian West and Elon Musk could be worth money on dark web forums. Selling the private messages of presidential hopeful Joe Biden or former mayor of New York Michael Bloomberg could also have political consequences.

However, the BBC has spoken to one hacker who specialises in social media account takeovers and has been part of a hacking group with one account suspected of involvement.

"Honestly, I think the hack is over because I feel this may have been a quick money grab and run situation," he said.

"If they do have the DMs, they will be extremely careful with who they sell them to, if they do, because it increases their chances of being caught by quite a bit."

(editor-in-charge:Press center5)

relevant content
  • WhatsApp and other messaging apps oppose 'surveillance'
  • North Melbourne confirm star Tarryn Thomas 'will take time away from the club' following a new allegation of inappropriate behaviour: 'He turned really evil very quickly' 
  • White Ho utilize slams Russia for saying U.S. orchestrated Putin 'assassination attempt': John Kirby hits back at 'lying' Kremlin's 'ludicrous' claims Biden administration was behind Kremlin kamikaze drone 'assault'
  • 'She repeatedly  utilized anti-Semitic tropes and compared U.S. and Israel to Hamas and the Taliban': Kevin McCarthy explains why GOP gave Squad member Omar the boot - after hysterical AOC leaped to her defense
  • MP calls for Parliament probe of rate 'rigging' evidence
  • Cookery's ultimate hellraiser dead at 46: British Masterchef host Jock Zonfrillo lost his virginity at 12, set an apprentice on fire and credited Marco Pierre White for helping him overcome addiction to take Australia by storm
  • Ho utilize votes to block 'woke' Biden plan pushing retirement planners to invest in ESG in 401ks 
  • Nancy Pelosi claims calls for Dianne Feinstein, 89, to resign are SEXIST: Democrats scramble to find a replacement for Senator facing growing calls to step down over shingles absence and multiple questions about her mental health
Recommended content
  • Wimbledon's 2019 champion Simona Halep fails a drugs test for blood-booster Roxadustat - but former world No 1 says she feels 'betrayed' and will fight 'until the end' to clear her name 
  • Memphis PD will permanently SCRAP 'Scorpion' unit behind Tyre Nichols' killing just two years after it was formed to tackle city's most serious violent crime
  • Miracle at the mosque: Survivor is pulled out from the rubble ten hours after bomb blast kills more than NINETY people in Pakistan
  • Police are granted more time to quiz Leeds hospital 'terror suspect': Man, 27, who was 'armed with a gun and viable explosive device' to be held in custody for a week 
  • At least seven people are dead in an acomponentment fire in Wisconsin as cops launch criminal investigation 
  • Xi Jinping is handed historic third term as Chinese president after enacting new law that'll let him rule for life
Hot Content