Live data from Hacker News

Who’s behind Wednesday’s epic Twitter hack?

krebsonsecurity.com

21–30 of 536 posts

Re: Who’s behind Wednesday’s epic Twitter hack?

#21

It's not a hack when an employee holds the door open and gives use of an admin management tool to a third party. Likewise, it's not a bitcoin scam when bitcoin is the method of transfer, just like it's not a US-dollar scam every other time dollars are used in theft.

I think there is an argument for it being a hack in the sense that a secure system should try and limit internal abuse too.

Re: Who’s behind Wednesday’s epic Twitter hack?

#22
post #14

Earlier quoted context omitted.

Bitcoin is sort of notable vs US-dollar in that it’s significantly more of a novelty, and unlike the dollar, doesn’t have same fraud recovery path.

>unlike the dollar, doesn’t have same fraud recovery path. You mean electronic us dollars? I doubt you'd be able to recover physical us dollars if they were scammed.

Yep, good point. But if someone stole this amount in cash through a hack or social engineering, I think that would be even more notable :)

Re: Who’s behind Wednesday’s epic Twitter hack?

#23
This is the most important point:

> Also, it seems clear that this Twitter hack could have let the attackers view the direct messages of anyone on Twitter, information that is difficult to put a price on but which nevertheless would be of great interest to a variety of parties, from nation states to corporate spies and blackmailers.

My understanding is the hackers used the admin panel to change the email addresses of the accounts, which means they could reset passwords and perform full account takeover [what about 2fa?]. That means they could login as the user, and so it means they could read the user's direct messages. (Ironically, Twitter's solution of disabling posts from blue checkmarks would not have stopped exfiltration of direct messages while an account was compromised.)

Re: Who’s behind Wednesday’s epic Twitter hack?

#25

The among taken in this scam is chump change compared to the YouTube scammers. YouTube is a vastly bigger website than twitter and way slower to respond to accounts begin stolen by scammers. I remember seeing an Ripple giveaway scam that in a single day made 100k with just a single account ,. And fake bill gates one made 40k. the list goes on and on. My guess is the total taken is in the $3-5 million range from youtu…

What are these YouTube scams you're referring to? I'm not aware of them.

https://cointelegraph.com/news/fake-spacex-youtube-channels-...

The first one I saw was a Rip of a SpaceX livestream. I watched it for a bit then noticed all the BitCoin references and got confused then realized it was a scam account. How they get promoted basically to the front page is the issue.

Re: Who’s behind Wednesday’s epic Twitter hack?

#26

The among taken in this scam is chump change compared to the YouTube scammers. YouTube is a vastly bigger website than twitter and way slower to respond to accounts begin stolen by scammers. I remember seeing an Ripple giveaway scam that in a single day made 100k with just a single account ,. And fake bill gates one made 40k. the list goes on and on. My guess is the total taken is in the $3-5 million range from youtu…

What are these YouTube scams you're referring to? I'm not aware of them.

~~ https://lmgtfy.com/?q=Ripple+giveaway+scam&s=d ~~ \s

Citation would be appreciated for “fake bill gates one made 40k”

Re: Who’s behind Wednesday’s epic Twitter hack?

#27

While it may sound ridiculous that anyone would be fooled into sending bitcoin in response to these tweets, an analysis of the BTC wallet promoted by many of the hacked Twitter profiles shows that on July 15 the account processed 383 transactions and received almost 13 bitcoin on July 15 — or approximately USD $117,000. This could be mostly the attackers’ own money. It’s impossible to tell, but I haven’t seen anyone…

What would they gain by doing that?

Re: Who’s behind Wednesday’s epic Twitter hack?

#28

It's not a hack when an employee holds the door open and gives use of an admin management tool to a third party. Likewise, it's not a bitcoin scam when bitcoin is the method of transfer, just like it's not a US-dollar scam every other time dollars are used in theft.

We have devalued the term hacking to the point were just opening cmd on windows is "hacking" now

Re: Who’s behind Wednesday’s epic Twitter hack?

#29

It's not a hack when an employee holds the door open and gives use of an admin management tool to a third party. Likewise, it's not a bitcoin scam when bitcoin is the method of transfer, just like it's not a US-dollar scam every other time dollars are used in theft.

Quit being a pedant and sliding valuable comments with this bullshit.

Re: Who’s behind Wednesday’s epic Twitter hack?

#30
post #20

The among taken in this scam is chump change compared to the YouTube scammers. YouTube is a vastly bigger website than twitter and way slower to respond to accounts begin stolen by scammers. I remember seeing an Ripple giveaway scam that in a single day made 100k with just a single account ,. And fake bill gates one made 40k. the list goes on and on. My guess is the total taken is in the $3-5 million range from youtu…

And you don't even need to steal an account. When the Playstation 5 launch event was happening I searched for it on Youtube, clicked the top result and it turned out to be a scammer restreaming the real live event with graphics added saying Sony would double your BTC - just send to this address ___.

that may have been an ad. scammers are buying youtube ads too
Post reply on HN