Live data from Hacker News

Hackers take over prominent Twitter accounts in simultaneous attack

coindesk.com

201–210 of 1001 posts

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#202

It's amusing that this is so successful only because of all the people posting their triumphant screenshots of success in losing all their money. All it takes is 100 gullible people to net $100k, and there's a lot more than 100 gullible people on Twitter. And it all happened in the span of 20 minutes. Can we expect any better response in the hopes of preventing this next time assuming all the accounts are hacked alre…

You're going to regret this post when a world leaders twitter says: "Nukes Incoming, hide yo kids, hide yo wives" one day...

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#203

With so many accounts compromised, the hackers might actually have full access to Twitter's backend. The postmortem would be very interesting. I'll be looking forward to it. Imagine if the hackers timed the intrusion during github outage, and twitter's employees can't deploy a fix for the exploit fast enough because github was down!

probably a social media manager api keys

Do that many accounts use the same social media manager?

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#204

With so many accounts compromised, the hackers might actually have full access to Twitter's backend. The postmortem would be very interesting. I'll be looking forward to it. Imagine if the hackers timed the intrusion during github outage, and twitter's employees can't deploy a fix for the exploit fast enough because github was down!

And it seems that it's still compromised. Tweets get deleted and then they re-appear.

> All Bitcoin sent to my address below will be sent back doubled. If you send $1,000, I will send back $2,000!

> Only doing this for the next 30 minutes! Enjoy.

No, it's hacker's doing, they need to keep timestamps updated

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#205

Loads of accounts still tweeting it in realtime. Follow it live: https://twitter.com/search?q=bc1qxy2kgdygjrsqtzq2n0yrf2493p8...

https://twitter.com/search?q=bc1qxy2kgdygjrsqtzq2n0yrf2493p8... Added "filter:verified" to query Edit: Add @JoeBiden to the list.

I can't believe Twitter haven't managed to stop this yet!

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#206
post #79
post #7

Elon Musk as well. Tweets still up, saying "Feeling greatful, doubling all payments sent to my BTC address! You send $1,000, I send back $2,000! Only doing this for the next 30 minutes." As of now, 121 people have sent cash totally more than 2.5BTC. Edit: Just seen @BillGates compromised as well, same bitcoin account. Edit 2: Elon's tweet seems to be getting removed, and then reposted again shortly after. About $40k…

I'm amazed that accounts at the scale of Elon and Bill Gates weren't locked down within moments. They've been reposting these for at least 30 minutes. What is going on that Twitter didn't get them locked ASAP? Also all of Apple's tweets deleted, and now posting the bitcoin thing as well: https://twitter.com/Apple/status/1283506278707408900

> What is going on that Twitter didn't get them locked ASAP?

I don't think Twitter itself knows yet.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#207
post #133

Just what kind of an operation is Twitter running here? It seems crazy that they don't have any kind of anti-abuse system in place that could just block tweets with this specific Bitcoin address or possibly tweets matching the regexp of any Bitcoin address. I.e. limit the damage and buy a couple of hours while they try to find the root cause. (Yes, yes, staged rollouts. But anti-abuse systems don't work by those rule…

In the article it shows the tweet isn't a bitcoin address, its just a link to another site which presumably has the actual scam.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#208

With so many accounts compromised, the hackers might actually have full access to Twitter's backend. The postmortem would be very interesting. I'll be looking forward to it. Imagine if the hackers timed the intrusion during github outage, and twitter's employees can't deploy a fix for the exploit fast enough because github was down!

probably a social media manager api keys

No way, it's way too widepread and would be shut down by now.

Elon Musk, Barack Obama and Wiz Khalifa just tweeted the scam again this very minute, more than an hour since it started. This is backend access, Twitter can't figure out how to shut it down.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#210
post #157

With so many accounts compromised, the hackers might actually have full access to Twitter's backend. The postmortem would be very interesting. I'll be looking forward to it. Imagine if the hackers timed the intrusion during github outage, and twitter's employees can't deploy a fix for the exploit fast enough because github was down!

boy I sure hope we get a juicy post mortem, this is quite a scam

I don’t think I’ve ever looked forwards to a postmortem so much, so many possibilities.
Post reply on HN