Live data from Hacker News

Hackers take over prominent Twitter accounts in simultaneous attack

coindesk.com

331–340 of 1001 posts

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#332
Is it just me, or does this seem suspiciously poorly thought out? Perhaps there is a second stage involving stock plays. The BTC thing might be a diversion.

Or we are incredibly lucky and the exploit was found by people with really bad foresight and imagination.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#333
post #321
post #83

Earlier quoted context omitted.

Honestly, we should be relieved if thats all that was stolen. A more sophisticated attack would involve OTM puts on TSLA and a tweet along the lines of: "finding major defects in Ys and 3s. shutting down all lines to reconfigure for a week" That could have netted the attackers millions.

They could have just bought puts on twitter as it is currently down 4% after hours.

Now _this_ may be the real con! A much better idea.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#334

Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.

Keeping in mind the attackers will not be able to perform this stunt again though the same attack vector, It could also simply be that the attackers overestimated how much they would make from this attack.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#336

Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.

It could just be a relatively unsophisticated actor who stumbled upon a serious vulnerability and didn't know enough to market it to, eg, a state actor or whatever.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#338

I'm flabbergasted they haven't just hit the panic button and shut everything down. Unless, perhaps, they can't.

You mean shutdown Twitter? I think that's a bit extreme in this case.

Imagine if the hacker was a bit more nefarious and hacked Trump's account to say he was launching a first strike attack against Iran or on Musk's account saying he was halting Model S production due to battery defect. The real world ramifications could be immense.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#339

Lots and lots of crypto accounts hacked. Either Twitter is hacked or some automated tweeting system has a 0day.

My bet is on some kind of client/marketing platform that all these accounts gave write permission to. Edit: I stand corrected, many other comments mention that the offending tweets appear to be posted from the web app, so this suggests an issue within Twitter itself.

Some of these are really high profile hacks (Biden/Obama for eg). I'm wondering if its a silly twitter authentication bypass.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#340
post #7

Elon Musk as well. Tweets still up, saying "Feeling greatful, doubling all payments sent to my BTC address! You send $1,000, I send back $2,000! Only doing this for the next 30 minutes." As of now, 121 people have sent cash totally more than 2.5BTC. Edit: Just seen @BillGates compromised as well, same bitcoin account. Edit 2: Elon's tweet seems to be getting removed, and then reposted again shortly after. About $40k…

can you post how you track the wallet this is going into? Thanks.

EDIT: Someone already did:

https://bitref.com/bc1qxy2kgdygjrsqtzq2n0yrf2493p83kkfjhx0wl...

Post reply on HN