Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Hackers take over prominent Twitter accounts in simultaneous attack

coindesk.com

Post reply on HN
Print view View original

991–1000 of 1001 posts

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#991

Post by ryanisnan »

hacker_newz wrote: post #985
e79 wrote: post #974

A lot of people are asking “why a bitcoin scam?” From what we know right now, targeted accounts had their emails and 2FA reset via an admin tool. These attacks were noisy, so the window of opportunity for the attacker was small. The attack was launched after hours, likely to limit the chance that the compromised Twitter employee would be around. So market manipulation wasn’t really a great option. This was basically…

After hours for who?

Yeah, that's just wrong. It was mid-day PDT, right around Twitter's core hours, and many of the targets are also west coasters.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#992

Post by amai »

Isn't it obvious? All the hacked accounts were fake accounts from the start managed by twitter employees who fill them with content every day to simulate an active social network. The hack just revealed that Twitter in fact rules the world and all these other companies, billionaires and celebrities simply don't exist.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#993

Post by dclowd9901 »

maxcan wrote: post #83
iamben wrote: post #7

Elon Musk as well. Tweets still up, saying "Feeling greatful, doubling all payments sent to my BTC address! You send $1,000, I send back $2,000! Only doing this for the next 30 minutes." As of now, 121 people have sent cash totally more than 2.5BTC. Edit: Just seen @BillGates compromised as well, same bitcoin account. Edit 2: Elon's tweet seems to be getting removed, and then reposted again shortly after. About $40k…

Honestly, we should be relieved if thats all that was stolen. A more sophisticated attack would involve OTM puts on TSLA and a tweet along the lines of: "finding major defects in Ys and 3s. shutting down all lines to reconfigure for a week" That could have netted the attackers millions.

It would be ridiculously easy to track down those puts and narrow them to a possible hacker. Authorities would find them in hours.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#995

Post by e79 »

ryanisnan wrote: post #991
hacker_newz wrote: post #985

Earlier quoted context omitted.

After hours for who?

Yeah, that's just wrong. It was mid-day PDT, right around Twitter's core hours, and many of the targets are also west coasters.

Yep you’re right. My bad. Hmmm... I still think my point makes sense. The “smash and grab” style attack fits given how noisy it was. People were wondering why they didn’t do something far more insidious like covertly gather everybody’s DMs and such. That’s not really feasible when you know your attack is going to get noticed fairly quickly.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#996

Post by vs4vijay »

If you take a look at some of the transactions, you will see some interesting addresses like:

1JustReadALL1111111111111114ptkoK

1TransactionoutputsAsTexta13AtQyk

1YouTakeRiskWhenUseBitcoin11cGozM

1BitcoinisTraceabLe1111111ZvyqNWW

1WhyNotMonero777777777777a14A99D8

1forYourTwitterGame111111112XNLpa

Link: https://www.blockchain.com/btc/tx/67b814526ae6ee78a16059bfcf...

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#997

Post by pizza »

ErikAugust wrote: post #743
pizza wrote: post #425

Earlier quoted context omitted.

It's possible this was conducted by somebody who underestimated the hack's value, or isn't even really doing it for monetary gain rather than to just stir chaos

Are you the AOL Pizza? (I’m guessing not but have to ask)

nope sorry :)

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#998

Post by tetha »

htrp wrote: post #839
tetha wrote: post #559

Earlier quoted context omitted.

More of a b2b context. However, we've had an unannounced pentester achieve RCE on our systems. Not a fun situation. At that point, we were forced by our contracts, and data protection laws, and a CEO aware of all of these, to shut the affected productive system down. We stopped all services, set the firewalls of our hoster to only accept traffic from our office and that's it, while figuring out wtf happened. Those me…

When you say unannounced pentester, how the hell did that happen? Usually, isn't someone in the escalation chain aware of these types of things?

A manager at a customer told a pentester to take our system without telling anyone. As simple as that. The pentester did. We axed their system.

This was elevated in ridiculousness, because said manager was backpedaling really, really hard after we contacted the pen-testing company as well as the customers senior management. However, all attempts at re-instating the system were swiftly blocked by the customers security policies and security teams. So, the system stayed down for a solid amount of time.

After all, the customer insisted on us participating in their security workflows for that system under their security teams control. And from their companies point of view, this was an external hostile attack -- since the manager didn't tell anyone.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#999

Post by webXL »

madmulita wrote: post #980
jsnell wrote: post #133

Just what kind of an operation is Twitter running here? It seems crazy that they don't have any kind of anti-abuse system in place that could just block tweets with this specific Bitcoin address or possibly tweets matching the regexp of any Bitcoin address. I.e. limit the damage and buy a couple of hours while they try to find the root cause. (Yes, yes, staged rollouts. But anti-abuse systems don't work by those rule…

They might be too busy renaming all their 'master' branches.

Daaaaaaamn! I bet morale really has deteriorated since national politics leaked into business decisions and employees being cut off from their daily social interactions isn't helping.

Re: Hackers take over prominent Twitter accounts in simultaneous attack

#1000

Post by feydaykyn »

WillPostForFood wrote: post #889
feydaykyn wrote: post #846

Earlier quoted context omitted.

What about Donald Trump wanting to shame the company which prevented him to tweet? Is it too far fetched?

Real estate developer by day, elite hacker at night?

What an entertaining idea! I was thinking more about hiring talent or using gov resources, he has the money and the position for either one.
Post reply on HN