Live data from Hacker News

Hackers take over prominent Twitter accounts in simultaneous attack

coindesk.com

111–120 of 1001 posts

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#111
post #76

Uber has been hacked as well. At this point, they can get any high profile Twitter user. EDIT: You know this is a coordinated Twitter hack when they have Apple's account hacked [0]. https://twitter.com/Apple/status/1283506278707408900

I'm guessing a social media manager application got compromised, or an exploit in Twitter's API that allows you to post as someone else. It's hard to see all these different accounts falling for the same scam + not having 2FA, etc.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#112
post #94
post #76

Uber has been hacked as well. At this point, they can get any high profile Twitter user. EDIT: You know this is a coordinated Twitter hack when they have Apple's account hacked [0]. https://twitter.com/Apple/status/1283506278707408900

They haven't yet gone after the most prominent Twitter user.

Would be too obvious. Noone believes what that account tweets anyway.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#114
post #21

> At least some of the compromised accounts have multi-factor authentication enabled, including CoinDesk's. Interesting. I wonder if it was a SMS hack, and if not, then a new kind of vulnerability?

Twitter dropped support for SMS posting earlier this year:

https://www.theverge.com/2020/4/27/21238131/twitter-sms-noti...

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#116

So many accounts are affected, this seems to be a system-level hack rather than a compromise of individual accounts. Someone has found a way to post a tweet from any account they like?

One theory is it's a tweet scheduling platform, rather than Twitter itself that was hacked.

No. Clicking into a tweet shows you which app was used to post it. https://help.twitter.com/en/using-twitter/how-to-tweet#sourc...

These tweets are showing up as being posted from the Twitter web interface.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#118
post #21

> At least some of the compromised accounts have multi-factor authentication enabled, including CoinDesk's. Interesting. I wonder if it was a SMS hack, and if not, then a new kind of vulnerability?

Is there a way to pin a tweet via SMS? I don't think so... and these tweets are getting pinned.

I believe OP meant that the attackers got access to the account by hacking SMS, thus getting the verification code and legitimately logging in the accounts.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#119

Earlier quoted context omitted.

Where did you get the 2.5BTC number from? It's more like 1.3BTC by looking up the address on their website. https://bitref.com/bc1qxy2kgdygjrsqtzq2n0yrf2493p83kkfjhx0wl... Edit: I stand corrected. Holy crap!

https://www.blockchain.com/btc/address/bc1qxy2kgdygjrsqtzq2n... 5.9BTC now

11 BTC received !!!
Post reply on HN