Live data from Hacker News

Hackers take over prominent Twitter accounts in simultaneous attack

coindesk.com

341–350 of 1001 posts

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#341

A lot of people (rightly) pointing out that the actual exploit payload here is a horribly inefficient way to monetize such awesome power. Some of the replies that influencing regulated markets would be traceable...sure, but trillions of dollars flow through these markets each and every day. A decently large options position accumulated over days wouldn't raise any red flags, and one tweet about the Fed raising rates…

So... What if this is just massive distraction for a Twitter content manipulation of some sort, like making some tweets disappear or incriminating some people with malicious content?

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#342
post #133

Just what kind of an operation is Twitter running here? It seems crazy that they don't have any kind of anti-abuse system in place that could just block tweets with this specific Bitcoin address or possibly tweets matching the regexp of any Bitcoin address. I.e. limit the damage and buy a couple of hours while they try to find the root cause. (Yes, yes, staged rollouts. But anti-abuse systems don't work by those rule…

It's absolutely crazy. This doesn't look like just leaked keys - it looks like genuine, manual access to accounts (as well as automated). The whole system must be compromised. @kanye replied to the scam tweet with "Sent out over $2,000,000!" [1].

[1]: https://i.imgur.com/wN7u43C.png

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#345

Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.

this is the best fun i've had in a while but i've just ruined it for myself with a conspiracy theory that some prankster youtuber has set this up and there will be a "hilarious" video about it tomorrow

Yeah, not possible with both the last US pres and vice pres being hit.

Literally, at least 3 of the top 10 richest people in the world got hit. All of whom probably really don't like each other to begin with...

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#346

I'm flabbergasted they haven't just hit the panic button and shut everything down. Unless, perhaps, they can't.

You mean shutdown Twitter? I think that's a bit extreme in this case.

Ok, y'all have convinced me. Shut it down!

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#347

Your site is getting hacked, you don't know how the hackers are doing it, what do you do ops wise? Take the whole site down for a few hours? Because the entire platform is compromised, how do you handle that?

Yes, of course. Take the site down if you don't have a read only mode or something. You are losing millions in trust every minute this hack goes on.

This is possibly a blessing in disguise. Obama and Biden's accounts have been hacked as well so this basically just burned Twitter as an international political platform.

Following that thought, it is entirely possible the whole point of the hack is to discredit Twitter and the bitcoin bit is just smoke.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#348
Seems like the hacker has got 100% access to Twitter's backend and is just not able to decide whom to attack next!

One after another big handles getting hacked!

Collection till now has crossed 12 BTC (https://www.blockchain.com/btc/address/bc1qxy2kgdygjrsqtzq2n...)

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#349

Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.

Keeping in mind the attackers will not be able to perform this stunt again though the same attack vector, It could also simply be that the attackers overestimated how much they would make from this attack.

I doubt that. For one, they wouldn't be reusing the crypto messages from the past which have been seen by everyone on twitter a thousand times. I ignore based on tweet rather than looking at who tweeted it most of the time. So they at least would write new messages if they were after money.

There are so many ways to make money that even a dumb person could find something better than posting crypto ads without compromising on opsec.

Post reply on HN