Twitter is removing those because it's of their own internal backend, not because they're necessarily connected to the hack. Huge leap from Mboard on this
Twitter internal panel linked to account hijackings
11–20 of 477 posts
Re: Twitter internal panel linked to account hijackings
#12“Trends Blacklist” & “Search Blacklist” are interesting buttons. Manipulation much ?
Immoral.
Actively overriding what's really trending with what they prefer to trend.
Assuming this leak is real.
Re: Twitter internal panel linked to account hijackings
#13Anyone have links to more of these images? Also, if you search for the source for one of the images (mentioned in the article), you can find this tweet: https://twitter.com/UnderTheBreach/status/128349929454113177... which says the recent hacks were done through that tool.
I saw this Imgur album linked in one of the original tool tweets. Not sure if fake or real obv. https://imgur.com/a/2sqjNUo
I don't understand this angle because typically admin panels only let you manage the account; deactivate, manage email address, etc. As shown in the screenshots.
Tweeting on behalf of another user seems like an unnecessary feature to give admins.
Re: Twitter internal panel linked to account hijackings
#14Earlier quoted context omitted.
I saw this Imgur album linked in one of the original tool tweets. Not sure if fake or real obv. https://imgur.com/a/2sqjNUo
I don't understand this angle because typically admin panels only let you manage the account; deactivate, manage email address, etc. As shown in the screenshots. Tweeting on behalf of another user seems like an unnecessary feature to give admins.
Some suggested the admin panel can initiate a password reset, and that, coupled with email management would allow account takeover, effectively (without allowing 'tweet as user' functionality).
Re: Twitter internal panel linked to account hijackings
#15I’d be surprised if Twitter didn’t have some internal tool like this but I’d expect it to only be accessible over a VPN that few had access to.
Re: Twitter internal panel linked to account hijackings
#16It's an admin panel that shows account information and allows for the staff to change details. What is the big deal?
I guess it implies that the attack was from the inside?
Inside attack / insider's admin account credentials compromised / admin panel itself compromised. Would love to see an RCA on this.
Re: Twitter internal panel linked to account hijackings
#17> Hawley said "please reach out immediately to the Department of Justice and the Federal Bureau of Investigation and take any necessary measures to secure the site before this breach expands
It's kind of bizarre when you have the highest levels of government doing their critical communication on a free social media service to the point where they are critically dependent on it, then begging for support when things go wrong.
Maybe you shouldn't use a free service that is not under your control or any proper regulatory or quality constraints for your most important messaging to the public then?
Re: Twitter internal panel linked to account hijackings
#18Re: Twitter internal panel linked to account hijackings
#19“Trends Blacklist” & “Search Blacklist” are interesting buttons. Manipulation much ?
If the screenshot is real, I'm pretty sure that Scott Adams (the cartoonist) has that Search Blacklist button applied to him. I recently tried to search for users with his name, and he wouldn't appear at all (while unverified names with 0 followers would show up).
Had to go through DuckDuckGo to find his handle.
Re: Twitter internal panel linked to account hijackings
#20Earlier quoted context omitted.
I don't understand this angle because typically admin panels only let you manage the account; deactivate, manage email address, etc. As shown in the screenshots. Tweeting on behalf of another user seems like an unnecessary feature to give admins.
Some suggested the admin panel can initiate a password reset, and that, coupled with email management would allow account takeover, effectively (without allowing 'tweet as user' functionality).
All the hacked accounts seem to have had the associated email changed. I think the attack goes admin panel -> change email -> reset PW -> tweet bitcoin scams.