Live data from Hacker News

Hackers take over prominent Twitter accounts in simultaneous attack

coindesk.com

641–650 of 1001 posts

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#642

Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.

Doesn't even look like Twitter has acknowledged the attack yet. The status page [1] shows all green.

[1] https://api.twitterstat.us/

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#644
post #219
post #152

Why isn't twitter taking its infrastructure down?

It would be cheaper for twitter to refund every person 10x what they sent than to shut down the entire site.

No. No it wouldn't. Trust is priceless and they're losing it by the minute.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#645

With so many accounts compromised, the hackers might actually have full access to Twitter's backend. The postmortem would be very interesting. I'll be looking forward to it. Imagine if the hackers timed the intrusion during github outage, and twitter's employees can't deploy a fix for the exploit fast enough because github was down!

If they had full access to Twitter’s backend, they probably would be tweeting from accounts like @POTUS or @jack. But this seems like they have access to limited accounts. Most likely gained access to a third party service that allows you to manage your tweets? Edit: they tweeted from the twitter support account. Just wow. They might have actually gotten into Twitter’s systems. Edit 2: To expand on my edit above, I s…

Maybe they're POTUS fans ;)

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#647

Tweet from TwitterDev team yesterday: https://twitter.com/TwitterDev/status/1283068902331817990 > 2 days to go… #TwitterAPI https://twitter.com/TwitterDev/status/1283433096780677122 > Thank you to all of you who have engaged with us and shared your feedback. Your input has been vital, and we’re committed to continuing these conversations with you. There’s so much more we’re doing to build a better #TwitterAPI… and Ea…

Nice catch, this may be what it was.

Edit: looks like an admin panel was the culprit https://news.ycombinator.com/item?id=23853786

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#648
post #356

Earlier quoted context omitted.

Even worse? How about POTUS declares war on China thru twitter? OMG, I just realized how dumb that would have been to say back in 2016. But these days?

This hack could absolutely get people killed. There are several tweets I can think of from POTUS that would begin immediate military mobilization from an unfriendly country.

It’s been close before, the below comes to mind. https://www.japantimes.co.jp/news/2018/09/10/asia-pacific/po...

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#649

No Trump?

Perhaps Twitter has additional security around his account? An IP whitelist? Perhaps the President has a special version of the twitter client that includes additional authentication? Twitter is no fan of the current president, but it seems plausible for national security reasons.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#650

Earlier quoted context omitted.

It "feels" like an insider attack (simultaneous compromise of lots of high value accounts) but I agree, it will make for a fascinating post mortem if one is produced.

Hmm, how much money this scam would potentially generates? I think the salary of an engineer working on twitter would be higher given how fast this scam would be shut down. Would a twitter employee risk their career to this scam?

[deleted]
Post reply on HN