Live data from Hacker News

Hackers take over prominent Twitter accounts in simultaneous attack

coindesk.com

481–490 of 1001 posts

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#481
post #353
post #335

Earlier quoted context omitted.

What makes you think they don’t? We had one on Reddit in 2008.

Because if there ever was a moment to press that button, it would be now. Thousands of accounts are still tweeting that BTC address.

I'm pretty sure most of the still incoming tweets with that address are copycats/trolls at this point.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#482

Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.

Seems more likely to me that it was a Twitter employee or someone with access to an employee's PC to reset passwords.

But wouldn't that be evident very, very quickly, from just looking at a relevant account's audit log, and shut down right away?

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#483
post #438
post #356

Earlier quoted context omitted.

Even worse? How about POTUS declares war on China thru twitter? OMG, I just realized how dumb that would have been to say back in 2016. But these days?

That's assuming Tweets actually serve an actual diplomatic function and are not merely marketing/propaganda for voters. (Also POTUS is not authorized to declare any wars btw.)

There are multiple instances of policy changes where 'Twitter first' was the chosen road.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#484

I'm flabbergasted they haven't just hit the panic button and shut everything down. Unless, perhaps, they can't.

Apparently blue check marks can’t tweet atm: https://twitter.com/brandontwall/status/1283525485440503811?...

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#485

Earlier quoted context omitted.

a temp fix is to modify the backend to prevent anyone from pasting a bitcoin address or any long string of numbers and letters that may resemble such an address

Not really. That just prevents them from posting bitcoin addresses. They still have access to all the accounts and can post whatever they like. It's still dangerous. And what about all the real posts that contain long strings?

i said 'temp'. how many real posts are 30+ chars string of gibberish? like .01% of all posts ?

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#487

Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.

> a diversion while they get the real loot

How about market manipulation via other tweets that subtly affect trading bots reading Twitter?

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#488
post #438
post #356

Earlier quoted context omitted.

Even worse? How about POTUS declares war on China thru twitter? OMG, I just realized how dumb that would have been to say back in 2016. But these days?

That's assuming Tweets actually serve an actual diplomatic function and are not merely marketing/propaganda for voters. (Also POTUS is not authorized to declare any wars btw.)

> (Also POTUS is not authorized to declare any wars btw.)

While true, this effectively doesn't matter given the number of people we've bombed since our last declaration of war in 1942 [0].

[0] https://www.senate.gov/pagelayout/history/h_multi_sections_a...

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#489

I'm flabbergasted they haven't just hit the panic button and shut everything down. Unless, perhaps, they can't.

a temp fix is to modify the backend to prevent anyone from pasting a bitcoin address or any long string of numbers and letters that may resemble such an address

A bitcoin scam, in the grand scheme of things, is on the more harmless end of the spectrum of what they could do with this. They absolutely should shut it down while they work this out.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#490

With so many accounts compromised, the hackers might actually have full access to Twitter's backend. The postmortem would be very interesting. I'll be looking forward to it. Imagine if the hackers timed the intrusion during github outage, and twitter's employees can't deploy a fix for the exploit fast enough because github was down!

Totally agree, backend - Musk's tweets being deleted and popping up again before our eyes was a dead giveaway.

It could be SQL injection writing tweets directly to the database for all we know.

I agree with everyone else saying the site should be pulled. Incredibly sketchy.

Post reply on HN