Talk Talk, Script Kids & The Quest for ‘OG’
Summary: A UK IT professional named Chris Blake had his Outlook and Twitter accounts hijacked in May 2015 after an attacker called his ISP posing as him and convinced a support representative to redirect his mail by reading back associated addresses that the caller then spoofed. The attacker, who took over Blake's @Fearful Twitter handle and renamed it 'Glubz', was tied by Krebs to a 16-year-old in Norwich, and London police said they had arrested a fourth individual in connection with the TalkTalk hack, a 16-year-old boy from Norwich.
Why it matters: The entire compromise ran through the recovery email address at Blake's ISP, where a single support call and a spoofed message undid two-factor authentication on the primary account. Krebs notes the same pattern appeared in the alleged breach of CIA Director John Brennan's inbox, where attackers called Verizon to reset his password.
Read the original at Krebs on Security ↗
- Topics
- Phishing & Social Engineering
- Related
- US disrupts North Korean campaign behind $400 million crypto theft Cyber Risks · Nov 14, 2026North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure Cyber Risks · Nov 13, 2026FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Cyber Risks · Nov 13, 2026