Fun

How Hackers Exploited Twitter’s VPN Problems, Obtained God Mode and Took Over Accounts

News Feed - 2020-10-26 04:10:54

How Hackers Exploited Twitter"s VPN Problems, Obtained God Mode and Took Over Accounts


An investigation by the New York State Department of Financial Services has revealed how the great Twitter hack in July happened. A total of 130 high-profile, celebrity accounts were compromised and many were used to tweet about a bitcoin giveaway scam. How Twitter Was Hacked


The New York State Department of Financial Services (NYDFS) released its Twitter investigation report last week. It explains how the massive Twitter hack on July 15 happened, resulting in many high-profile accounts being accessed and used to tweet about a bitcoin giveaway scam.


A NYSE-listed technology company with a market cap of $40 billion, Twitter has more than 330 million total monthly active users and over 186 million daily active users, including over 36 million (20%) in the U.S., the NYDFS detailed.


The hack began on July 14 when one or more hackers called several Twitter employees, claiming to be calling from the IT department’s help desk about Twitter’s VPN, which a number of employees reported having problems with. “Employees had frequent problems with the VPN connections to the network,” the report details.


Twitter’s VPN problem ballooned when the company shifted to remote working in March due to the Covid-19 outbreak, which put a strain on the company’s technology infrastructure, resulting in frequent VPN problems. “The hackers took advantage of these issues and pretended to be calling from Twitter’s IT department about a VPN problem,” the NYDFS stated, elaborating: The hackers’ claims were far more credible – and ultimately successful – because Twitter’s employees were all using VPN connections to work and routinely experiencing VPN problems that required IT’s assistance.


The hackers directed the employees to a phishing website that looked identical to the legitimate Twitter VPN website and was hosted by a similarly named domain. “As the employee entered their credentials into the phishing website, the hackers would simultaneously enter the information into the real Twitter website. This false log-in generated an MFA notification requesting that the employees authenticate themselves, which some of the employees did,” the NYDFS explained. “While some employees reported the calls to Twitter’s internal fraud monitoring team, at least one employee believed the hackers’ lies.”


The report details that Twitter maintains “internal account management tools” to manage a range of user account issues, which the hackers gained access to. A number of authorized Twitter employees have a username and password to access these internal account management tools. According to the report: Overall, 130 Twitter user accounts were compromised during the Twitter hack. Of those, 45 accounts were used to send tweets. Twitter believes that for up to 36 of the 130 targeted accounts, the hackers also accessed DM inboxes.




During its investigation, the NYDFS conducted a survey and learned that 15 cryptocurrency companies blocked transfers to the hackers’ addresses posted on Twitter, and seven did not. Four crypto companies actively blocked their users’ attempts to send BTC to the hackers’ bitcoin addresses. In particular, the NYDFS found: Coinbase blocked approximately 5,670 transfers, valued at approximately $1,294,000. Square blocked 358 transfers, valued at approximately $51,000. Gemini blocked two transfers, valued at approximately $1,800. Bitstamp blocked one transfer, valued at approximately $250.


What do you think about this Twitter hack? Let us know in the comments section below. Hash Watch: 73% of Bitcoin Cash Blocks Mined With BCHN, Poloniex Launches Fork Futures NEWS | 30 mins ago Billionaire Paul Tudor Jones Sees Massive Upside in Bitcoin, Like Investing in Apple or Google Early NEWS | 1 day ago Tags in this story hack twitter, how to hack twitter, twitter accounts hacked, twitter bitcoin, twitter celebrity accounts, twitter hack, twitter hacker, twitter investigation, twitter vpn problem


Image Credits: Shutterstock, Pixabay, Wiki Commons Use Bitcoin and Bitcoin Cash to play online casino games here. Disclaimer: This article is for informational purposes only. It is not a direct offer or solicitation of an offer to buy or sell, or a recommendation or endorsement of any products, services, or companies. Bitcoin.com does not provide investment, tax, legal, or accounting advice. Neither the company nor the author is responsible, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with the use of or reliance on any content, goods or services mentioned in this article. Read disclaimerShow comments

News Feed

Saudi Arabia and OPEC Reveal Surprise Oil Production Cut; White House Insists Cuts Aren’t Advisable Right Now
Saudi Arabia and OPEC Reveal Surprise Oil Production Cut; White House Insists Cuts Aren"t Advisable Right Now On Sunday, Saudi Arabia and several major oil producers announced thei
Germany’s Information Security Office champions hardware wallets
Vince Quill6 hours agoGermany’s Information Security Office champions hardware walletsAccording to a recent Chainalysis report, thefts resulting from crypto hacks and exploits have totaled $1.58 billion in 2024.1477 To
Brayden Lindrea6 hours agoUS Space Force pauses use of ChatGPT-like tools due to security fears: ReportAt least 500 Space Force staff members have been affected, according to the department’s former chief software off
Former Treasury Official Issues Dire Warning, Bill Ackman Fears Economic ‘Train Wreck,’ US Gov. Remains Top BTC Holder, and More — Week in Review
Former Treasury Official Issues Dire Warning, Bill Ackman Fears Economic "Train Wreck," US Gov. Remains Top BTC Holder, and More — Week in Review Warnings continue to pervade mar
Spin to Win 10,000 Free Rounds in the Latest Tournament from Bitcoin Games
Spin to Win 10,000 Free Rounds in the Latest Tournament from Bitcoin Games Win from a prize pool of 50,000 Free Spins in the newly launched tournament by Bitcoin
Ethereum Price Hits 300-Week MA For The Second Time Ever, Here’s What Happened In 2022
Reason to trust Strict editorial policy that focuses on accuracy, relevance, and impartiality Created by industry experts and meticulously reviewed The highest standards in reporting and pu
Hamster Kombat destined for Guinness World Record?
Gareth Jenkinson5 hours agoHamster Kombat destined for Guinness World Record?Hamster Kombat claims to be the third-fastest app in history to reach 150 million users. Here’s what you need to know about the viral Telegra
Philippines Financial Institution Unionbank Now Provides Crypto Custody and Trading Services
Philippines Financial Institution Unionbank Now Provides Crypto Custody and Trading Services The Union Bank of the Philippines, Inc., more commonly known as Unionbank, announced th
Bitcoin, Ethereum Technical Analysis: Strong Dollar Pushes BTC Below $19,000
Bitcoin, Ethereum Technical Analysis: Strong Dollar Pushes BTC Below $19,000 Bitcoin was once again trading under $19,000, as the U.S. dollar moved to a one-week higher versus seve
The ‘Undo Button’ Wallet Tool Gives Users the Ability to Reverse Ethereum Transactions
The "Undo Button" Wallet Tool Gives Users the Ability to Reverse Ethereum Transactions On Thursday, November 12, 2020, the blockchain firm Kirobo launched a tool
Catch Nomad Capitalist Live At Playa Del Carmen
Catch Nomad Capitalist Live At Playa Del Carmen For the first time in four years, the premier offshore consulting firm Nomad Capitalist is bringing you the world’s #1 offsh
Jesse Coghlan7 hours agoThailand threatens Facebook over crypto scams and other fraudulent adsThailand’s digital minister said he would seek a court order to shut Facebook in the country unless it takes action on the a