Live data from Hacker News

Hackers take over prominent Twitter accounts in simultaneous attack

coindesk.com

251–260 of 1001 posts

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#252

Your site is getting hacked, you don't know how the hackers are doing it, what do you do ops wise? Take the whole site down for a few hours? Because the entire platform is compromised, how do you handle that?

Yes, of course. Take the site down if you don't have a read only mode or something. You are losing millions in trust every minute this hack goes on.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#254
post #83
post #7

Elon Musk as well. Tweets still up, saying "Feeling greatful, doubling all payments sent to my BTC address! You send $1,000, I send back $2,000! Only doing this for the next 30 minutes." As of now, 121 people have sent cash totally more than 2.5BTC. Edit: Just seen @BillGates compromised as well, same bitcoin account. Edit 2: Elon's tweet seems to be getting removed, and then reposted again shortly after. About $40k…

Honestly, we should be relieved if thats all that was stolen. A more sophisticated attack would involve OTM puts on TSLA and a tweet along the lines of: "finding major defects in Ys and 3s. shutting down all lines to reconfigure for a week" That could have netted the attackers millions.

It isn't over yet.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#258
post #242

With so many accounts compromised, the hackers might actually have full access to Twitter's backend. The postmortem would be very interesting. I'll be looking forward to it. Imagine if the hackers timed the intrusion during github outage, and twitter's employees can't deploy a fix for the exploit fast enough because github was down!

> Imagine if the hackers timed the intrusion during github outage, and twitter's employees can't deploy a fix for the exploit fast enough because github was down! Is Twitter really using GitHub internally (even self-hosted)?

Is there even a self hosted Github? AFAIK there is no public offering of the sort.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#259
post #212

With so many accounts compromised, the hackers might actually have full access to Twitter's backend. The postmortem would be very interesting. I'll be looking forward to it. Imagine if the hackers timed the intrusion during github outage, and twitter's employees can't deploy a fix for the exploit fast enough because github was down!

Maybe a front end/OAuth issue - those are not uncommon either. Will be interesting to learn more. Also begs the question, who is liable in such cases....

Liable for the account being compromised? Twitter. Liable for people sending money? People sending money.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#260
Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either:

- a test of a new hacking system

- a demonstration to a big client

- a first shot to threat some entity

- a diversion while they get the real loot

And that the BTC messages are just a way to justify it so it looks like a simple scam.

Such a hack is worth way, WAY more than the few BTC it could bring.

Post reply on HN