Hackers take over prominent Twitter accounts in simultaneous attack • Hacker News Board

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#221

Post by actuator » Wed, Jul 15, 2020, 9:37 PM UTC

arduinomancer wrote: post #207

jsnell wrote: post #133

Just what kind of an operation is Twitter running here? It seems crazy that they don't have any kind of anti-abuse system in place that could just block tweets with this specific Bitcoin address or possibly tweets matching the regexp of any Bitcoin address. I.e. limit the damage and buy a couple of hours while they try to find the root cause. (Yes, yes, staged rollouts. But anti-abuse systems don't work by those rule…

In the article it shows the tweet isn't a bitcoin address, its just a link to another site which presumably has the actual scam.

The ones I saw from Musk, Buffett etc had the actual address.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#222

Post by neurostimulant » Wed, Jul 15, 2020, 9:37 PM UTC

vmception wrote: post #188

neurostimulant wrote: post #144

With so many accounts compromised, the hackers might actually have full access to Twitter's backend. The postmortem would be very interesting. I'll be looking forward to it. Imagine if the hackers timed the intrusion during github outage, and twitter's employees can't deploy a fix for the exploit fast enough because github was down!

probably a social media manager api keys

But when you post a tweet via api, the tweet will include the app's name at the bottom? The screenshot in the article has "Twitter Web App" at the bottom.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#223

Post by WarOnPrivacy » Wed, Jul 15, 2020, 9:37 PM UTC

and Obama https://twitter.com/BarackObama/status/1283515490653147139

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#224

Post by positr0n » Wed, Jul 15, 2020, 9:37 PM UTC

jackschultz wrote: post #142

PatrolX wrote: post #106

So far people have sent: Transactions 253 Total Received $101,539.14 Link to address: https://www.blockchain.com/btc/address/bc1qxy2kgdygjrsqtzq2n...

An incredibly number of people in the entire world who have seen these tweets, and currently, 5:16 eastern, shows 271 transactions. Not like everyone who sees these tweets has bitcoin accounts, but less than 300 falling for the fake tweets is such a small number in terms of populations.

It's common to "seed the tip jar" by transferring some of your own BTC from another wallet to the public facing one. So that number should be treated like a ceiling.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#225

Post by delive » Wed, Jul 15, 2020, 9:37 PM UTC

jackschultz wrote: post #142

PatrolX wrote: post #106

So far people have sent: Transactions 253 Total Received $101,539.14 Link to address: https://www.blockchain.com/btc/address/bc1qxy2kgdygjrsqtzq2n...

An incredibly number of people in the entire world who have seen these tweets, and currently, 5:16 eastern, shows 271 transactions. Not like everyone who sees these tweets has bitcoin accounts, but less than 300 falling for the fake tweets is such a small number in terms of populations.

It's probably because the subset of people who would fall for it likely don't have BTC.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#226

Post by retox » Wed, Jul 15, 2020, 9:37 PM UTC

monokh wrote: post #2

This must be a twitter exploit. Just too many high profile accounts have been pushing out scams at the same time.

You'd think a 0day like that would be worth much more than the BTC they're going to receive.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#227

Post by pier25 » Wed, Jul 15, 2020, 9:37 PM UTC

Barack Obama too: https://imgur.com/a/KGTEQNt

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#228

Post by rvz » Wed, Jul 15, 2020, 9:37 PM UTC

neurostimulant wrote: post #144

With so many accounts compromised, the hackers might actually have full access to Twitter's backend. The postmortem would be very interesting. I'll be looking forward to it. Imagine if the hackers timed the intrusion during github outage, and twitter's employees can't deploy a fix for the exploit fast enough because github was down!

> Imagine if the hackers timed the intrusion during github outage, and twitter's employees can't deploy a fix for the exploit fast enough because github was down!

Imagine that. At that point it would be more secure to self-host the code off of GitHub to push that critical fix Twitter sorely needs right now.

Its still on going as we type.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#229

Post by tass » Wed, Jul 15, 2020, 9:37 PM UTC

stefan_ wrote: post #139

tass wrote: post #125

Earlier quoted context omitted.

Searching for the bitcoin address in twitter gives an absolute ton of results. Are all these accounts hacked, or are people now posting just to joke around?

Love how they don't just ban the bitcoin address. Firehose big data my ass. No one at home at Twitter.

Yeah this is nuts. Clearly something on the backend is broken, Obama just tweeted it out too.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#230

Post by jcims » Wed, Jul 15, 2020, 9:38 PM UTC

leephillips wrote: post #14

etaioinshrdlu wrote: post #9

Partial list of hacked accounts here, https://twitter.com/Justin12393LEE/status/128349844588658688... Mentions: - Bitcoin - Coinbase - BINANCE - CZ_Binance - Gemini - Kucoin - Gate .io - Coindesk - Tron - Justin Sun - Charlee Lee

I feel left out.

Just tweet it yourself. Who will know?