Live data from Hacker News

Hackers take over prominent Twitter accounts in simultaneous attack

coindesk.com

371–380 of 1001 posts

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#371
post #353
post #335

Earlier quoted context omitted.

What makes you think they don’t? We had one on Reddit in 2008.

Because if there ever was a moment to press that button, it would be now. Thousands of accounts are still tweeting that BTC address.

It’s unfathomable to me that they don’t have this button, but equally so that they haven’t pressed it.

Edit: There we go. https://twitter.com/JacKnutson/status/1283527213606789121

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#372

Twitter is seriously out of control. They should have pulled the plug an hour ago, and that plug pulling should have been automated. If this were something even more sinister a whole country could have plummeted into chaos, death, destruction.

Seriously, this hack should inspire the most terrifying Black Mirror episode yet.

Imagine what "could have been" done.

Simultaneous compromise leading to tens or hundreds of millions of people receiving the same / similar messages for over an hour from the people they trust the most.

Death and destruction waiting to happen.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#373
post #83
post #7

Elon Musk as well. Tweets still up, saying "Feeling greatful, doubling all payments sent to my BTC address! You send $1,000, I send back $2,000! Only doing this for the next 30 minutes." As of now, 121 people have sent cash totally more than 2.5BTC. Edit: Just seen @BillGates compromised as well, same bitcoin account. Edit 2: Elon's tweet seems to be getting removed, and then reposted again shortly after. About $40k…

Honestly, we should be relieved if thats all that was stolen. A more sophisticated attack would involve OTM puts on TSLA and a tweet along the lines of: "finding major defects in Ys and 3s. shutting down all lines to reconfigure for a week" That could have netted the attackers millions.

The attack didn't start until after the markets closed.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#374
All in all that looks like a poorly thought out attack. So much more could've been done than cryptoscam.

Considering execution, it may be that this is some API 0day which does not show (or make it hard to guess) which account messages are being posted from. How else would you explain neutral messages for all account when you could've personalised it per account to maximize efficiency.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#375

Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.

113k is a little reward?

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#376
post #353
post #335

Earlier quoted context omitted.

What makes you think they don’t? We had one on Reddit in 2008.

Because if there ever was a moment to press that button, it would be now. Thousands of accounts are still tweeting that BTC address.

...so what? People tweet garbage all the time. There are already millions of twitter spambots.

What's so horrible about a few more?

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#377

With so many accounts compromised, the hackers might actually have full access to Twitter's backend. The postmortem would be very interesting. I'll be looking forward to it. Imagine if the hackers timed the intrusion during github outage, and twitter's employees can't deploy a fix for the exploit fast enough because github was down!

I wonder if this is hack in the sense that the account passwords were compromised or that the system itself was compromised in a way that would allow the attacker to tweet from any account.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#379

Watch this turns out to be a JS dependency tree problem from some library that was compromised months ago in some NPM module, used in the twitter web interface.

I love this theory, but at the same time, I feel that it's unlikely. Without knowing how their back-end is put together, that'd be like... trying to smuggle in a robot into an office building to break into a safe that's inside without knowing the floor plan, what kind of knobs are on the doors, etc.

Could have paid/convinced/threatened an intern/employee to scope it out and then deployed the hack externally to bypass safety measures. Complicated but doable.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#380

I'm flabbergasted they haven't just hit the panic button and shut everything down. Unless, perhaps, they can't.

You mean shutdown Twitter? I think that's a bit extreme in this case.

Not as extreme as demonstrating that they evidently lack the ability to stop it...
Post reply on HN