Twitter Team Concludes Recent Hack Was Done Through Spear-Phishing

News
Fri, 07/31/2020 - 08:06
Yuri Molchan
Two weeks ago, Twitter suffered unprecedented attack and massive BTC scam that followed; now the platform’s team has an explanation as to how the hackers managed to do it
Cover image via stock.adobe.com
Contents

As reported by Reuters, after a proper investigation, the Twitter team finally found out how cyber criminals managed to hijack a large number of top-tier accounts and initiate their massive Bitcoin scam from those pages.

Spear-phishing attack suspected

The Twitter team has come to the conclusion that the cyber criminals who managed to gain access to around 130 VIP accounts on the social media microblogging giant used the phone spear-phishing technique to accomplish their scheme.

"Spear-phishing" means that hackers send emails from a person whose address is familiar to the recipient in order to target the receiver to give up some sort of confidential data.

In this way, the hackers managed to hijack over a hundred top Twitter accounts, publish Bitcoin spam tweets on forty-five of them, gain access to thirty-six pages and retrieve Twitter data from seven of them.

The article also reports that the attackers chose certain Twitter team members as their targetsthose employees who directly work with tools for account support. Previously, U.Today reported that Twitter suspected that one of its employees was even bribed into helping the culprits.

Related
Crypto Hackers Move $4,975,676 in Bitcoin from Funds Grabbed from Bitfinex in 2016 Attack

Large-scale Bitcoin scam

Among the accounts that the hackers seized control of were the pages of Bill Gates, Elon Musk, Kim Kardashian, Joe Biden (Trump’s rival for the November presidential election), Barack Obama and Changpeng Zhao (CEO of Binance).

Data available on the blockchain show that the cyber criminals managed to reap $100,000 in BTC.

They offered Twitter users an exchange: users send their BTC to an address and then receive double that amount in returna classic cryptocurrency scam.

Right after the attack took place, Twitter blocked all the hijacked pages to prevent further damage, and some crypto exchanges blocked the scammers' BTC address to stop users from sending their crypto to it.

Soon after the incident, control over the hijacked pages was given back to their owners.

About the author

Yuri is a journalist interested in technology and technical innovations. He has been in crypto since 2017. Believes that blockchain and cryptocurrencies have a potential to transform the world in the future. ‘Hodls’ cryptocurrencies. Has written for several crypto media. Currently is a news writer at U.Today, can be contacted at yuri.molchan@u.today.


Articles by author

This site uses cookies for different purposes. Please set your preferences in Cookie Settings and visit our Cookie policy for more information on how and why cookies are used on this site. Click here for cookie policy

Cookie settings