Cyber Risks · Krebs on Security

Who’s Behind Wednesday’s Epic Twitter Hack?

Summary: On Wednesday, July 15, 2020, Twitter accounts belonging to Binance, Joe Biden, Jeff Bezos, Barack Obama, Elon Musk, Michael Bloomberg and Warren Buffett began posting bitcoin scam links after attackers tricked or coerced Twitter employees into giving up access to internal administrative tools. A wallet promoted in the tweets processed 383 transactions and received almost 13 bitcoin, roughly USD $117,000, while Krebs reported strong indications the attack came from actors in the SIM-swapping community, including a figure known as PlugWalkJoe, identified by a mobile-industry source as 21-year-old Joseph James O'Connor of Liverpool, U.K.

Why it matters: The same admin tools that let attackers post from a former president's account could also have exposed the direct messages of anyone on Twitter - information Krebs notes would draw interest from nation states, corporate spies and blackmailers.

Read the original at Krebs on Security ↗

Topics
Phishing & Social Engineering
Related