Twitter Employees Hacked In ‘Coordinated Social Engineering Attack’

By Michael Novinson for CRN
Thursday, July 16, 2020

• 2.5k
• More

Twitter accounts that were compromised have been completely locked down, and Twitter said it will restore access to the original account owner only when the company is certain it can do so securely. In addition, Twitter said it has taken significant steps within its own organization to limit access to internal systems and tools while the company’s investigation is ongoing.

ImmuniWeb founder and CEO Ilia Kolochenko said the attack highlights the extremely fragility of the modern information space. With this level of access to high-profile Twitter accounts, Kolochenko said nation-state actors could have announced a military or nuclear incident and provoked national havoc, or spread misinformation about a rival business to ruin its stock price and then purchase it for pennies.

“If the attackers got access and managed to steal Twitter’s databases—and are not just opportunistically exploiting an unknown authentication bypass flaw in one of its systems—millions of users and enterprises are at critical risk of highly sophisticated phishing, ransomware, identity theft and many other attacks for the next few years,” Kolochenko said in a statement. Read Full Article