Massive Twitter hack (The hackening)

Clarence Boddiker

Hundreds of blue check Twitter accounts hacked tonight, Elon Musk, Joe Biden, Kanye West, Jeff Bezos any many many more.
The accounts posted messages claiming to double your money if you donated Bitcoin within a short period of time. Thousands fell for it.

Blue check accounts have been blocked from tweeting (possibly back up now)

Seems like a fairly big deal, have the hackers had access to DMS/Private messages?

Rodney Bathgate

Any nudey videos posted?

Inquitus

Given the prevalence of hacked accounts it would seem to be twitter itself that was compromised not the individuals, very embarrassing for them!

SlipperyPeople

https://twitter.com/TwitterSupport/status/1283526400146837511


Twitter Official Account tweeted that they have disabled the password reset feature.


This indicates that the hackers had access to some management interface that allowed them to reset users e-mail and then perform a password reset to gain access to every account they want.


They have also blocked verified accounts from tweeting and added both Bitcoin wallets to a blacklist (since the attackers switched wallets once the first one got filtered).

Rodney Bathgate

Does that mean I am not going to get double my money back?

vicwatson

But the tick is white

100,000 euro earned by the hackers so far

s1ippy

[Deleted User] wrote: »

100,000 euro earned by the hackers so far

I ain't clickin that!

Neowise

s1ippy wrote: »

I ain't clickin that!

I'll click it for you.

Blue check **** appear to have returned, much to my chagrin.

igCorcaigh

Access to DMs?

It means they can any twitter account, which is huge, but to then use it for some tacky spam effort?

igCorcaigh

https://twitter.com/jack/status/1283571658339397632?s=19

joseywhales

igCorcaigh wrote: »

Access to DMs?

It means they can any twitter account, which is huge, but to then use it for some tacky spam effort?

I mean that is only one of the things they are doing, if they extract all information, networks and private messages, there's probably plenty for them to exploit over time.

joseywhales

So who exactly gives funds to anyone when solicited?

igCorcaigh

joseywhales wrote: »

I mean that is only one of the things they are doing, if they extract all information, networks and private messages, there's probably plenty for them to exploit over time.

DMs can be used to blackmail someone. The scam seems too tacky if you have that level of access.

Canis Lupus

joseywhales wrote: »

So who exactly gives funds to anyone when solicited?

idiots.

Clever scam. Clever enough to rope some people in. All these billionaires and ex-Presidents "giving back". Send us bitcoin and we'll double it.

Definitely feel like this could have been worth more to the hackers tho.

s1ippy

Maybe twitter were flexing

scilover

Crazy how these hackers managed to hack high profile twitter accounts. I wonder if anyone actually thought the tweets were real and transferred money to the account....

Yeah, around $120k+ was transferred. But they could have made insane money manipulating markets and buying options.

Musk: "Tesla shutting down production until Covid-19 disappears."
Bezos: "We are going to treat our workers well."
Cook: "iPhones found to cause cancer. Dispose of your device immediately."
Sundar Pichai: "After much deliberation, Google are leaving the advertising market."

Anything. They could have made so much money. And they went for a we'll double your money scam.

igCorcaigh

https://twitter.com/josephfcox/status/1283593343365050368?s=19

[Deleted User]

[Deleted User] wrote: »

Yeah, around $120k+ was transferred. But they could have made insane money manipulating markets and buying options.

Musk: "Tesla shutting down production until Covid-19 disappears."
Bezos: "We are going to treat our workers well."
Cook: "iPhones found to cause cancer. Dispose of your device immediately."
Sundar Pichai: "After much deliberation, Google are leaving the advertising market."

Anything. They could have made so much money. And they went for a we'll double your money scam.

Surely they'd expose themselves buying and selling shares.

igCorcaigh

[Deleted User] wrote: »

Yeah, around $120k+ was transferred. But they could have made insane money manipulating markets and buying options.

Musk: "Tesla shutting down production until Covid-19 disappears."
Bezos: "We are going to treat our workers well."
Cook: "iPhones found to cause cancer. Dispose of your device immediately."
Sundar Pichai: "After much deliberation, Google are leaving the advertising market."

Anything. They could have made so much money. And they went for a we'll double your money scam.

Weird, isn't it. The hacker seems like an idiot.

silverharp

I doubt money was the motive , worst way to use such a brilliant hack. Shows that Twitter employees can crash the stock market or start a war, is their IT dept all staffed by gender studies graduates these days?

biko

Disgruntled employee, the most difficult thing to guard against.

nullObjects

Deleted User wrote: »

Yeah, around $120k+ was transferred. But they could have made insane money manipulating markets and buying options.

Musk: "Tesla shutting down production until Covid-19 disappears."
Bezos: "We are going to treat our workers well."
Cook: "iPhones found to cause cancer. Dispose of your device immediately."
Sundar Pichai: "After much deliberation, Google are leaving the advertising market."

Anything. They could have made so much money. And they went for a we'll double your money scam.

Kind of fits the narrative of stories that seem like satire for Musk at least:

https://www.boringcompany.com/not-a-flamethrower
(Selling flamethrowers)

https://www.cnet.com/news/elon-musk-reveals-69-420-tesla-short-shorts/
(Selling short shorts)

ED E

biko wrote: »

Disgruntled employee, the most difficult thing to guard against.

The nightmare of infosec teams the world over.

paw patrol

biko wrote: »

Disgruntled employee, the most difficult thing to guard against.

an employee has access to private accounts. odd.


you'd wonder how private your whatsapp really is

biko

paw patrol wrote: »

you'd wonder how private your whatsapp really is

That's a different app but yeah, any app like that could be vulnerable if a employee with high enough admin rights goes rouge.

Whatsapp claims to be encrypted end-to-end which means no-one but you and the other party can read messages.
Facebook Messenger also claims to be encrypted end-to-end but tbh, I don't trust them.

biko

biko wrote: »

That's a different app but yeah, any app like that could be vulnerable if a employee with high enough admin rights goes rouge.

Whatsapp claims to be encrypted end-to-end which means no-one but you and the other party can read messages.
Facebook Messenger also claims to be encrypted end-to-end but tbh, I don't trust them.

No it doesn't. FB announced they would encrypt it but it hasn't been done yet. This is also why WhatsApp isn't integrated with any other FB apps, because it is the only one that is encrypted.

take everything

biko wrote: »

Disgruntled employee, the most difficult thing to guard against.

Hasn't Office Space taught people anything.

Riesen_Meal

Jude Shapely Wrongdoing wrote: »

No it doesn't. FB announced they would encrypt it but it hasn't been done yet. This is also why WhatsApp isn't integrated with any other FB apps, because it is the only one that is encrypted.

If you actually think WhatsApp is encrypted, I have some magic beans I want to sell you....

Fieldog

Fieldog wrote: »

If you actually think WhatsApp is encrypted, I have some magic beans I want to sell you....

Have you any evidence it isn't?

bobmalooka

Jude Shapely Wrongdoing wrote: »

Have you any evidence it isn't?

Whatsapp is subjected to moderation performed by people on relatively low pay.

TheValeyard

take everything wrote: »

Hasn't Office Space taught people anything.

Never take a mans red Swingline stapler.