Live data from Hacker News

Hackers take over prominent Twitter accounts in simultaneous attack

coindesk.com

811–820 of 1001 posts

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#811
post #215
post #94

Earlier quoted context omitted.

They haven't yet gone after the most prominent Twitter user.

One wonders if that specific account has some unique exemption in the Twitter code to specifically deal with it.

A disgruntled employee "deleted" that account temporarily a while ago, I've seen it theorised on reddit that that account has extra protections now.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#812

People who don't want scrutiny from their old tweets want an easy way to delete/wipe their tweets. There are a load of software out there that claim to do this. They all relatively take over the oAuth chain, and do the needful. But one of them does it as if you were in your browser. As to not give away information about the user's phone/type/version.

How is this relevant to the unfolding disaster?

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#813

Given how huge this hack is, and how little the BTC reward is going to be, I'm tempting to think this is either: - a test of a new hacking system - a demonstration to a big client - a first shot to threat some entity - a diversion while they get the real loot And that the BTC messages are just a way to justify it so it looks like a simple scam. Such a hack is worth way, WAY more than the few BTC it could bring.

Twitter's API is being updated within the next day. This is likely hackers abusing a known exploit in the current API before the changeover.

1) https://twitter.com/TwitterDev/status/1283068902331817990?s=...

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#815

Seems to me twitter should hire some humans to sit there and manually approve every tweet by all VIP accounts before they go live. How hard could that be? If that’s all they do you’re adding maybe a 30 second delay to every VIP tweet and you’re pretty much guaranteeing that this doesn’t happen again. Unless of course the hackers somehow inserted the tweet directly to the database and bypassing any such measures.

That will not help, as the imposter could post a sane tweet impersonating the VIP. The person checking would not be able to identify if it's the VIP or the imposter.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#816
post #772

Earlier quoted context omitted.

It could just be a relatively unsophisticated actor who stumbled upon a serious vulnerability and didn't know enough to market it to, eg, a state actor or whatever.

What would a state actor do with this? Read celebrities' DMs?

There's this guy with the handle @realDonaldTrump who is kind of a big deal on Twitter, you could start some real ugly messes by taking over that account

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#817

I've seen the groundwork for this over the last 6-8 weeks, with 'people' (questionable-looking accounts) retweeting screenshots of similar-looking tweets purporting to be from Elon Musk, and other similarly fishy accounts going 'wow it really works' or the like. I noticed them showing up consistently in replies to Trump tweets, probably just because they get tons of engagement.

Those have been going on for years. They clearly demonstrate Twitter's incompetence (which seems to have culminated today) since they were very easy to filter out with a simple regex, but I doubt they are related to this attack.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#818
post #83

Earlier quoted context omitted.

Honestly, we should be relieved if thats all that was stolen. A more sophisticated attack would involve OTM puts on TSLA and a tweet along the lines of: "finding major defects in Ys and 3s. shutting down all lines to reconfigure for a week" That could have netted the attackers millions.

The attack didn't start until after the markets closed.

they could have bought puts expiring tomorrow a few days ago

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#819

How is this different from the persistent “Elon Musk” btc giveaway posts that find their way onto every one of Trump’s tweets?

Those were using fake accounts attempting impersonate the real ones. This is the real accounts tweeting the scam.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#820

Earlier quoted context omitted.

Nope. They're actually getting away with quite a big loot! The number of unconfirmed transactions has catapulted from ~9k to about ~50k right now, which means there's large amount of activity. It will take a while for the dust to settle. You can watch them here https://www.blockchain.com/btc/unconfirmed-transactions chart https://www.blockchain.com/charts/mempool-count A better graph of the current transactions sitti…

I'm a little unclear, is the following correct?. So basically rando's are sending famous people bitcoin because the famous people tweeted "send us $$ and we'll send you double back"? And somehow the rando's haven't heard of the hack. Is this what's happening? Like are random people seriously sending them bitcoin? Or is it some weird form of money laundering? Although since that's very weird behavior even if there was…

receiving bitcoin on a wallet advertised on hacked accounts does not seem like a very effective mode of money laundering, imho
Post reply on HN