Live data from Hacker News

Hackers take over prominent Twitter accounts in simultaneous attack

coindesk.com

321–330 of 1001 posts

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#321
post #83
post #7

Elon Musk as well. Tweets still up, saying "Feeling greatful, doubling all payments sent to my BTC address! You send $1,000, I send back $2,000! Only doing this for the next 30 minutes." As of now, 121 people have sent cash totally more than 2.5BTC. Edit: Just seen @BillGates compromised as well, same bitcoin account. Edit 2: Elon's tweet seems to be getting removed, and then reposted again shortly after. About $40k…

Honestly, we should be relieved if thats all that was stolen. A more sophisticated attack would involve OTM puts on TSLA and a tweet along the lines of: "finding major defects in Ys and 3s. shutting down all lines to reconfigure for a week" That could have netted the attackers millions.

They could have just bought puts on twitter as it is currently down 4% after hours.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#322

Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.

this is the best fun i've had in a while but i've just ruined it for myself with a conspiracy theory that some prankster youtuber has set this up and there will be a "hilarious" video about it tomorrow

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#323
post #83
post #7

Elon Musk as well. Tweets still up, saying "Feeling greatful, doubling all payments sent to my BTC address! You send $1,000, I send back $2,000! Only doing this for the next 30 minutes." As of now, 121 people have sent cash totally more than 2.5BTC. Edit: Just seen @BillGates compromised as well, same bitcoin account. Edit 2: Elon's tweet seems to be getting removed, and then reposted again shortly after. About $40k…

Honestly, we should be relieved if thats all that was stolen. A more sophisticated attack would involve OTM puts on TSLA and a tweet along the lines of: "finding major defects in Ys and 3s. shutting down all lines to reconfigure for a week" That could have netted the attackers millions.

It's not 100% guaranteed though; Tesla stock is odd. And it might be possible to people short selling who timed it exactly right.

This "scam", while crude, will probably not result in any loss and it would be much harder to catch them

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#324
post #263

About $110k in the address. Honestly not that impressive for a hack of this scale. I wonder what they could have gotten if they reported this for a bug bounty instead. Or as Matt Levine said, "if I got Elon Musk's twitter password I'd wait until market hours to use it."

According to their hacker one program they pay $7,700 for account takeover exploits

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#326

Earlier quoted context omitted.

It "feels" like an insider attack (simultaneous compromise of lots of high value accounts) but I agree, it will make for a fascinating post mortem if one is produced.

Hmm, how much money this scam would potentially generates? I think the salary of an engineer working on twitter would be higher given how fast this scam would be shut down. Would a twitter employee risk their career to this scam?

It might as well be an employee whose devices were compromised.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#327

Twitter is seriously out of control. They should have pulled the plug an hour ago, and that plug pulling should have been automated. If this were something even more sinister a whole country could have plummeted into chaos, death, destruction.

Seriously, this hack should inspire the most terrifying Black Mirror episode yet.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#328

Earlier quoted context omitted.

Twitter almost certainly self-hosts GitHub, no?

Don't know, but current corporate dogma is to not host anything, including using third party auth provider which is like giving away their customer list.

> current corporate dogma is to not host anything

Do you mean that they prefer using managed services? Or do you mean that the services managed by their internal IT utlize AWS/etc for servers as opposed to on premises.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#329

Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.

[deleted]

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#330

Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.

Or just, someone stupid and uncreative got very very lucky and this was all they could come up with.
Post reply on HN