Listing some out that I've seen:
@Apple @Uber @elonmusk @kanye @MikeBloomberg @JoeBiden @WarrenBuffet @wizkhalifa @BarackObama @JeffBezos @MrBeastYT @FloydMayweather @LuckyovLegends @xxxtentacion
Hackers take over prominent Twitter accounts in simultaneous attack
141–150 of 1001 posts
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#142So far people have sent: Transactions 253 Total Received $101,539.14 Link to address: https://www.blockchain.com/btc/address/bc1qxy2kgdygjrsqtzq2n...
An incredibly number of people in the entire world who have seen these tweets, and currently, 5:16 eastern, shows 271 transactions.
Not like everyone who sees these tweets has bitcoin accounts, but less than 300 falling for the fake tweets is such a small number in terms of populations.
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#143Earlier quoted context omitted.
Presumably, there was a fake BTC address to go along with that tweet? Otherwise I assume Musk would just return any money...
Haha, I apologise in advance, but for some reason, the tone of your post just made me chuckle. It just had an amusing sort if naivite'. It was most likely the hacker's own BTC address.
Yeah, I think I just had a brain-fart moment there
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#144With so many accounts compromised, the hackers might actually have full access to Twitter's backend. The postmortem would be very interesting. I'll be looking forward to it.
Imagine if the hackers timed the intrusion during github outage, and twitter's employees can't deploy a fix for the exploit fast enough because github was down!
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#145Uber has been hacked as well. At this point, they can get any high profile Twitter user. EDIT: You know this is a coordinated Twitter hack when they have Apple's account hacked [0]. https://twitter.com/Apple/status/1283506278707408900
I'm guessing a social media manager application got compromised, or an exploit in Twitter's API that allows you to post as someone else. It's hard to see all these different accounts falling for the same scam + not having 2FA, etc.
I wonder if Elon is a type of guy who uses apps like Buffer or Social media manager app. It looks more like some exploit within Twitter which they've leveraged and orchestrated a coordinated tweet attack
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#146Earlier quoted context omitted.
One theory is it's a tweet scheduling platform, rather than Twitter itself that was hacked.
No. Clicking into a tweet shows you which app was used to post it. https://help.twitter.com/en/using-twitter/how-to-tweet#sourc... These tweets are showing up as being posted from the Twitter web interface.
I've not checked twitter api docs but I've seen stuff like "Posted from: Zombo smart fridge" and was under the impression an app could fill that field in with whatever they like.
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#147Did the hackers remove all tweets from Apple? Wtf
It seems like they did.
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#148Earlier quoted context omitted.
Honestly, we should be relieved if thats all that was stolen. A more sophisticated attack would involve OTM puts on TSLA and a tweet along the lines of: "finding major defects in Ys and 3s. shutting down all lines to reconfigure for a week" That could have netted the attackers millions.
"Hacking Elon’s Twitter account and using it for a crypto scam rather than a stock-trading scam shows a complete lack of imagination" - Naval https://twitter.com/naval/status/1283507218294292481?s=19
Are we certain that Twitter's share price won't be affected?
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#149The attacker must have added some high level access, for it to be still ongoing.
Re: Hackers take over prominent Twitter accounts in simultaneous attack
#150Earlier quoted context omitted.
One theory is it's a tweet scheduling platform, rather than Twitter itself that was hacked.
No. Clicking into a tweet shows you which app was used to post it. https://help.twitter.com/en/using-twitter/how-to-tweet#sourc... These tweets are showing up as being posted from the Twitter web interface.
But is it necessarily true that the authentication token was generated with the same app used to post the tweets?