Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Hackers take over prominent Twitter accounts in simultaneous attack

coindesk.com

Post reply on HN
Print view View original

191–200 of 1001 posts

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#191

Post by Scoundreller »

FanaHOVA wrote: post #111
rvz wrote: post #76

Uber has been hacked as well. At this point, they can get any high profile Twitter user. EDIT: You know this is a coordinated Twitter hack when they have Apple's account hacked [0]. https://twitter.com/Apple/status/1283506278707408900

I'm guessing a social media manager application got compromised, or an exploit in Twitter's API that allows you to post as someone else. It's hard to see all these different accounts falling for the same scam + not having 2FA, etc.

All the big names hit said "Twitter Web App" as the tweet source.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#193

Post by rsecora »

They are posting to almost every other account, high profile or not. Its a massive spam, too much users to be a password steal.

About the client, they are post from accounts that have only used "Twitter for Web" or only used "Twitter for Mac" or only used "Twitter for iPhone"... in the past

Updated accounts with the spam.

https://twitter.com/search?q=bc1qxy2kgdygjrsqtzq2n0yrf2493p8...

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#194

Post by marcinzm »

css wrote: post #44
whoisjuan wrote: post #18

Whoever hacked Twitter today definitely got major access to their backend: https://twitter.com/whoisjuan/status/1283502962103455744?s=2...

> Whoever hacked @Twitter today definitely got major access to their backend Is there any proof Twitter was hacked and not just these two accounts?

Based on this, a metric fuckton of small accounts are posting this as well right now. Unless you hacked the backend I don't see why you'd bother with 200 follower accounts.

https://twitter.com/search?q=bc1qxy2kgdygjrsqtzq2n0yrf2493p8...

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#195

Post by nonbirithm »

It's amusing that this is so successful only because of all the people posting their triumphant screenshots of success in losing all their money.

All it takes is 100 gullible people to net $100k, and there's a lot more than 100 gullible people on Twitter.

And it all happened in the span of 20 minutes. Can we expect any better response in the hopes of preventing this next time assuming all the accounts are hacked already? Or does the nature of realtime media and hundreds of bored eyes sitting on wads of cryptocurrency getting to it first mean it's just game over?

I remember the golden days of messing up people's lives over digital terminals, where the most they'd do was wipe your harddisk or warn the user of something vaguely ominous on the third Tuesday of April like "the Reaper's gonna get you" or play an 80's Top Ten number rendered through the PC speaker all of the sudden scaring you to death.

From here on out it's always going to be about money, and to me that's just boring and sad.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#196

Post by pastrami_panda »

danso wrote: post #108

This is the earliest non-deleted tweet I've found referencing the bitcoin address (or rather, noticing that an account got hacked). It was sent at 12:23PM Pacific time (more than 1.5 hours ago): https://twitter.com/lawmaster/status/1283481418518208513

It's astonishing that they can't seem to at least shut the platform down. Have they lost control completely or do they think it's preferable to let the scammers go on than to close shop?

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#197

Post by cryptica »

0x00000000 wrote: post #104
iamben wrote: post #7

Elon Musk as well. Tweets still up, saying "Feeling greatful, doubling all payments sent to my BTC address! You send $1,000, I send back $2,000! Only doing this for the next 30 minutes." As of now, 121 people have sent cash totally more than 2.5BTC. Edit: Just seen @BillGates compromised as well, same bitcoin account. Edit 2: Elon's tweet seems to be getting removed, and then reposted again shortly after. About $40k…

They could have inconspicuously joined the numerous TSLA shorters and made 100x that with one tweet

This strategy would require having money to begin with. It's a pretty big assumption that hackers have any money. If they had money, they wouldn't have to be hackers.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#198

Post by seebetter »

iamben wrote: post #7

Elon Musk as well. Tweets still up, saying "Feeling greatful, doubling all payments sent to my BTC address! You send $1,000, I send back $2,000! Only doing this for the next 30 minutes." As of now, 121 people have sent cash totally more than 2.5BTC. Edit: Just seen @BillGates compromised as well, same bitcoin account. Edit 2: Elon's tweet seems to be getting removed, and then reposted again shortly after. About $40k…

And just as I checked it, they pinned this tweet (an hour later)--

Elon Musk @elonmusk·38s

I am giving back to my community due to Covid-19!

All Bitcoin sent to my address below will be sent back doubled. If you send $1,000, I will send back $2,000!

bc1qxy2kgdygjrsqtzq2n0yrf2493p83kkfjhx0wlh

Only doing this for the next 30 minutes! Enjoy.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#200

Post by granzymes »

neurostimulant wrote: post #144

With so many accounts compromised, the hackers might actually have full access to Twitter's backend. The postmortem would be very interesting. I'll be looking forward to it. Imagine if the hackers timed the intrusion during github outage, and twitter's employees can't deploy a fix for the exploit fast enough because github was down!

Twitter almost certainly self-hosts GitHub, no?
Post reply on HN