Musk, Gates, Biden, Apple Among Accounts Taken Over

Breach scale implies Twitter admin takeover

Twitter’s stability has been compromised this evening, with the breach used to take over Elon Musk’s, Jeff Bezos’ and Monthly bill Gates’ and other’s distinguished Twitter accounts in a Bitcoin scam that has their followers directed to deposit Bitcoin in a certain wallet with the fake assure that contributions will be doubled.

Twitter has verified a stability incident, stating “You might be unable to Tweet or reset your password though we critique and address this incident”.

We are informed of a stability incident impacting accounts on Twitter. We are investigating and using methods to repair it. We will update everybody shortly.

— Twitter Aid (@TwitterSupport) July 15, 2020

The incident, which for after does essentially deserve the adjective “unprecedented” has also viewed the accounts of Apple, Uber and Kanye West taken over. Presidential candidate Joe Biden’s account is between those who have also Tweeted the scam. Numerous seem to have been able to quickly clear away the Tweets. The scenario is acquiring.

Yikes, strongest hypothesis is that the attackers have owned Twitter’s worker admin panel which makes it possible for Twitter staff members potential to alter pw/disable MFA to let an attacker to take over a distinguished account and tweet on their behalf with no dealing with their password or MFA.

— Rachel Tobac (@RachelTobac) July 15, 2020

Twitter Hacked: Admin Obtain Appears Probably

The scale of the incident implies an attacker both attained obtain to a Twitter employee’s administrative privileges or observed a sweeping vulnerability in the social platform’s login protocols. Specified that lots of of the accounts are possible, given their large profile, to have enabled two-aspect authentication, it seems plausible that another person senior at Twitter has been compromised and their privileges abused.

Observe the e-mail addresses alter. Twitter has no reason to give staff members indigenous obtain to impersonate people.
Accounts are staying stolen, auth token produced, and tweeted from. Observe how legitimate people nonetheless have tokens to delete tweets. Not a clean up strike.https://t.co/grlhbkhVhR

— Swift⬡nSecurity (@SwiftOnSecurity) July 15, 2020

Protection company RiskIQ says it has discovered infrastructure tied to the cryptocurrency scammers. The unverified list is on Pastebin here. 

RiskIQ scientists just doubled the amount of IoCs in the Pastebin. Make sure you go on to monitor it for updates as this scenario evolves https://t.co/D99QOpfbFc #twitterhack #twitterhacks #ThreatIntel #IOCs https://t.co/HZkJmDjRmM

— RiskIQ (@RiskIQ) July 15, 2020