news.volyx.in

Who’s behind Wednesday’s epic Twitter hack? (krebsonsecurity.com)

746 points by MindGods · 2271 days ago · 499 comments on HN

Article summary

A massive Twitter hack occurred on Wednesday, with accounts of public figures and celebrities tweeting out links to bitcoin scams. The hack happened because an employee was tricked or coerced into providing access to internal Twitter administrative tools. The attackers made off with approximately $117,000 in bitcoin. The hack is believed to be the work of individuals involved in SIM swapping, a form of crime that involves bribing or hacking employees at mobile phone and social media companies.

Main themes

  • Twitter hack
  • SIM swapping
  • social engineering
  • bitcoin scams
  • security measures
  • YouTube scams

What commenters say

  • Some people believe that the term 'hack' is being misused in this context, as the attackers gained access through social engineering rather than technical exploits.
  • Others argue that the term 'hack' is still applicable, as the attackers used technical means to take over accounts.
  • It is suggested that some of the bitcoin transactions may have been the attackers' own money, rather than stolen from victims.
  • The YouTube platform is also vulnerable to similar scams, with some commenters suggesting that hiring a human moderator to scan for crypto keywords could be a viable solution.
  • Others propose that automated algorithms could be refined to filter out scam videos without the need for human intervention.
  • Some commenters disagree, arguing that automated solutions would be more efficient and cost-effective.
  • The effectiveness of social engineering attacks highlights the need for improved security measures, including better access controls and employee education.