A number of high-profile Twitter accounts were simultaneously hacked on Wednesday by attackers who used the accounts â some with millions of followers â to spread a cryptocurrency scam.
Apple, Elon Musk and Joe Biden were among the accounts compromised in a broadly targeted hack that remained mysterious hours after taking place. Those accounts and many others posted a message promoting the address of a bitcoin wallet with the claim that the amount of any payments made to the address would be doubled and sent back â a known cryptocurrency scam technique.
In the hours following the initial scam posts, Kim Kardashian West, Jeff Bezos, Bill Gates, Barack Obama, Wiz Khalifa, Warren Buffett, YouTuber MrBeast, Wendyâs, Uber, CashApp and Mike Bloomberg also posted the cryptocurrency scam.
Screenshot via Twitter
Before the scope of the incident became clear, the hack initially appeared to target cryptocurrency-focused accounts. In an initial wave of scam posts, @bitcoin, @ripple, @coindesk, @coinbase and @binance were hacked with the same message: âWe have partnered with CryptoForHealth and are giving back 5000 BTC to the community,â followed by a link to a website, which we are not linking to.
The linked website was quickly pulled offline. Kristaps Ronka, chief executive of Namesilo, the domain registrar used by the scammers, told TechCrunch that the company suspended the domain âon the first reportâ it received.
Hacked accounts shifted to sharing multiple bitcoin wallet addresses as the incident went on, making things more difficult to track. Twitter acknowledged the situation at 2:45 p.m. PT Wednesday afternoon, referring to it as a âsecurity incident.â
We are aware of a security incident impacting accounts on Twitter. We are investigating and taking steps to fix it. We will update everyone shortly.
â Twitter Support (@TwitterSupport) July 15, 2020
At first, it appeared that some of the compromised accounts were back under their ownersâ control as tweets were quickly deleted. But then, Elon Muskâs account tweeted âhiâ after his initial tweet with the scam was deleted. The âhiâ tweet also disappeared.Â
Twitter users reported seeing error messages on the platform as the situation went on. TechCrunch reporter Natasha Mascarenhas saw this error (see below) when she tried to create a threaded tweet. TechCrunch reporter Sarah Perez saw a similar error when trying to post a normal tweet. Both have verified accounts.
Twitter error message (Image: TechCrunch)
As the issues continued, many verified Twitter users also reported being unable to tweet. Around 3:15 p.m. PT, the official Twitter Support account confirmed â[Users] may be unable to Tweet or reset your password while we review and address this incident.â
You may be unable to Tweet or reset your password while we review and address this incident.
â Twitter Support (@TwitterSupport) July 15, 2020
Who was hacked
It became clear early on that this situation was not the case of a single account being compromised as weâve seen in the past, but something else altogether. Even Apple, a company known for robust security, somehow fell victim to the scheme.
Appleâs account was also hacked. This was the accountâs first tweet. (Image: TechCrunch)
Many high profile accounts were quickly hijacked in rapid succession Wednesday afternoon, including @elonmusk, the eccentric Twitter-obsessed tech figure with a notoriously engaged fanbase. A scam tweet posted to the Tesla and SpaceX founderâs account simply directed users to send bitcoin to a certain address under the guise that he will âdouble any paymentâ â a known cryptocurrency scam technique. Muskâs account appeared to remain compromised for some time after the initial message, with follow-up posts claiming followers were sending money to the suspicious address.
Tesla and SpaceX founder Elon Musk had his Twitter account hacked to spread a cryptocurrency scam. (Image: TechCrunch)
Barack Obama had his Twitter account hacked to spread a cryptocurrency scam. (Image: TechCrunch)
Wiz Khalifaâs account was also compromised, as was the Twitter account of popular YouTuber MrBeast, who often posts giveaways, making his re-post of the bitcoin address particularly likely to drive followers to the scam.
The hack also hit legendary investor Warren Buffet, a prominent and harsh critic of cryptocurrencies like bitcoin. âI donât have any cryptocurrency and I never will,â Buffet told CNBC in February.
Unusual hack, common scam
While the scope of Wednesdayâs Twitter hack is unprecedented on the social network, the kinds of scams the hacked accounts promoted are common. Scammers take over high-profile Twitter accounts using breached or leaked passwords and post messages that encourage users to post their cryptocurrency funds to a particular address under the guise that theyâll double their âinvestment.â In reality, itâs simple theft, but itâs a scam that works.
The main blockchain address used on the scam site had already collected more than 12.5 bitcoin â some $116,000 in USD â and itâs going up by the minute.
A spokesperson for Binance told TechCrunch: âThe security team is actively investigating the situation of this coordinated attack on the crypto industry.â Several other companies affected by the account hacks did not immediately respond to a request for comment.
Itâs not immediately known how the account hacks took place. Security researchers, however, found that the attackers had fully taken over the victimsâ accounts, and also changed the email address associated with the account to make it harder for the real user to regain access.
Scammers frequently reply to high-profile accounts, like celebrities and public figures, to hijack the conversation and hoodwink unsuspecting victims. Twitter typically shuts these accounts down pretty fast.
A Twitter spokesperson, when reached, said the company was âlooking intoâ the matter but didnât immediately comment.
This story is developing. Stay tuned for updates.Â
Below are screenshots of some of the hacked accounts.
[gallery ids="2017548,2017549,2017550,2017551,2017552,2017553,2017555,2017556,2017557,2017558,2017547"]
Click here for more...
from #Bangladesh #News aka Bangladesh News Now!!!
No comments:
Post a Comment