Twitter Just Released Details Of Attack Vector Used By Hackers

TimeBit
2 min readAug 1, 2020

Twitter has distributed a report on its investigation concerning the reasons for the ongoing hack, during which 12 Bitcoin was conned out of the platform’s users.

Twitter released a report on July 30 uncovering how hackers accessed its inner network and record the executives tools in the ongoing attack.

It likewise gave additional measures estimates taken to improve security since the hack, which got 12 Bitcoin (BTC) through focusing on the Twitter records of big names and crypto businesses.

Phishing for complements

The update affirmed that Twitter had been the survivor of a social engineering attack, putting paid to rumour that the hack could have been an inside activity.

As per the report, the July 15 episode began with a lance phishing attack, focusing on few representatives by phone to pick up arrange get to access credentials:

“Not all of the employees that were initially targeted had permissions to use account management tools, but the attackers used their credentials to access our internal systems and gain information about our processes.”

The attacker at that point utilized this information to focus on extra representatives with access to account support tools.

A poor workman loses his tools

Reacting to reports that more than 1,000 employees approached the administrator devices, Twitter clarified that it has groups far and wide that help with account support.

Nonetheless, access to the devices is carefully restricted and just conceded for genuine business reasons. Since the attackers has additionally constrained access, and will proceed with a ceaseless training program on the dangers of phishing attacks.

During the hack the attackers got to 130 Twitter accounts, tweeted from 45 of these, got into the immediate messages inbox of 36 and downloaded the Twitter information of seven.

--

--

TimeBit

https://timebit.sg/ is a Blockchain-based financial ecosystem including a cryptocurrency exchange platform, Cloud Services, PAMM Model Trading, Payment Gateway.