Twitter Hacking for Profit and the LoLs
Summary: A Krebs on Security investigation found that two young men, known online as "lol" and "ever so anxious," acted as middlemen reselling access to a Twitter employee named "Kirk" for modifying or seizing high-value short-character "OG" accounts, with several such names changing hands before the July 15 bitcoin scam tweets went out from accounts including @barackobama and @elonmusk. The payment address Kirk gave the middlemen also received roughly $180,000 in bitcoin from the wallet tied to the scam messages, and leaked OGUsers messages show the middlemen discussing suspended-account help and SIM swapping.
Key Takeaway: The same bitcoin address that collected about $180,000 from the celebrity scam tweets also received payments for OG account takeovers, tying the petty resale market directly to the day's headline theft. The middlemen were not elite intruders but brokers who advertised a Twitter contact to a forum of buyers, which is the shape of the access economy your own employees and vendors may be trading in.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026