Live data from Hacker News

Hackers take over prominent Twitter accounts in simultaneous attack

coindesk.com

511–520 of 1001 posts

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#511
Posts stopped for the other btc address (bc1qxy2kgdygjrsqtzq2n0yrf2493p83kkfjhx0wlh)

Here's a tweet from KimKardashian, for a different BTC address (bc1qwr30ddc04zqp878c0evdrqfx564mmf0dy2w39l) https://twitter.com/KimKardashian/status/1283523054874877953

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#512

Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.

I can't imagine the user's devices were targeted (e.g. Obama's cell phone), so this must be internal. Eff me.

Why? It's certainly imaginable Obama's cell phone was targeted.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#513

Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.

> how little the BTC reward is going to be So far, the address has received the equivalent of over 50,000 USD.

Again, nothing. Given the accounts that were hacked, they could easily have moved markets and had pre-placed short bets that would have netted them potentially hundreds of millions.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#514

Your site is getting hacked, you don't know how the hackers are doing it, what do you do ops wise? Take the whole site down for a few hours? Because the entire platform is compromised, how do you handle that?

Worst case scenario, shut down the app servers, load-balancers or even the network equipment that connects the platform to the Internet.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#515
post #25

Place your bets, phishing or bug exploit. Some of these targets are too high profile to all fall for it and probably have teams that manage these accounts securely. Edit: 2fa was bypassed, interesting. https://twitter.com/tylerwinklevoss/status/12834920178892595...

Going differently, an internal API for managing accounts was exposed externally or not authorized correctly.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#516

Your site is getting hacked, you don't know how the hackers are doing it, what do you do ops wise? Take the whole site down for a few hours? Because the entire platform is compromised, how do you handle that?

Yes, of course. Take the site down if you don't have a read only mode or something. You are losing millions in trust every minute this hack goes on.

They just disabled posts from verified users.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#517

Twitter should suspend the entire platform until they can credibly fix this and prevent it in the future. An attacker could drop AMZN stock by 10% in minutes with just the wrong tweet from Bezos.

Yep, something like that already happened when the AP’s Twitter account was hacked back in 2013.

https://www.google.com/amp/s/www.washingtonpost.com/news/wor...

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#518

Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.

>Such a hack is worth way, WAY more than the few BTC it could bring. lol tons of ppl have been scammed. If by 'little' you means hundreds of k. In some Eastern European country that can last a lifetime.

They could have make >$10m With Elon’s account alone by manipulating the share price. A few 100k is nothing

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#519

I'm flabbergasted they haven't just hit the panic button and shut everything down. Unless, perhaps, they can't.

Apparently blue check marks can’t tweet atm: https://twitter.com/brandontwall/status/1283525485440503811?...

I've got a check and I can't tweet. It just says 'unable to send'. Twitter must have no idea where the source of the hack is.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#520

Posts stopped for the other btc address (bc1qxy2kgdygjrsqtzq2n0yrf2493p83kkfjhx0wlh) Here's a tweet from KimKardashian, for a different BTC address (bc1qwr30ddc04zqp878c0evdrqfx564mmf0dy2w39l) https://twitter.com/KimKardashian/status/1283523054874877953

How can it be still up after so much time? The response time from the SREs is extremely bad.
Post reply on HN