Live data from Hacker News

Hackers take over prominent Twitter accounts in simultaneous attack

coindesk.com

491–500 of 1001 posts

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#493

Earlier quoted context omitted.

Or a distraction while a bigger hack is going on?

Bingo, they're probably walking away with all of Twitter's internal data as we speak...

Alternative take, it could be a distraction while they short various stocks. Obviously 12 BTC/100K isn't worth hacking Twitter. Perhaps if everyone is watching the Bitcoin address, they may miss the real heist.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#494

Twitter should suspend the entire platform until they can credibly fix this and prevent it in the future. An attacker could drop AMZN stock by 10% in minutes with just the wrong tweet from Bezos.

They just disabled tweeting from verified accounts. Right now I have more power than Elon.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#495
post #452

Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.

Maybe the dude shorted the Twitter stock?

Yeah, I'm not sure there is much to be gained from leaking internal data (are DMs that valuable?). The actual scam is executed so poorly that it can't be the main goal too. "Prooving" you have a good exploit by throwing it away is also not plausible.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#496

Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.

How about the possibility of a Bitcoin marketing campaign?

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#497

Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.

It could just be a relatively unsophisticated actor who stumbled upon a serious vulnerability and didn't know enough to market it to, eg, a state actor or whatever.

mafia boy 2.0

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#499

Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.

It could just be a relatively unsophisticated actor who stumbled upon a serious vulnerability and didn't know enough to market it to, eg, a state actor or whatever.

But then why set up a rather simply scam instead of getting the bug bounty from twitter? That wallet is currently sitting at about 150k USD and these are rather hard to pay out. Why not just go for 100k USD bug bounty, completely legal and with fame?

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#500

Twitter should suspend the entire platform until they can credibly fix this and prevent it in the future. An attacker could drop AMZN stock by 10% in minutes with just the wrong tweet from Bezos.

Well, no verified user can tweet at the moment: https://twitter.com/TwitterSupport/status/128352640014683751...
Post reply on HN