Twitter logo. (AP Photo/Jeff Chiu)

Twitter racing to unravel mystery cyberattack

Some of the world’s most prominent names had their Twitter accounts post invitations for an apparent Bitcoin scam

As Twitter Inc. grapples with the worst security breach in its 14-year history, it must now uncover whether its employees were victims of sophisticated phishing schemes or if they deliberately allowed hackers to access high-profile accounts.

On Wednesday, some of the world’s most prominent names, including former president Barack Obama and Democratic candidate and his former vice president Joe Biden, along with Bill Gates, Elon Musk and Warren Buffett, had their Twitter accounts post invitations for an apparent Bitcoin scam. Twitter reacted by blocking further posts from all verified accounts on the service and said it had detected “a coordinated social engineering attack by people who successfully targeted some of our employees with access to internal systems and tools.”

The company’s explanation has ignited speculation over the identity of the perpetrators and what they were actually targeting in the attack. The scale of the endeavor and its timing —months before the November U.S. elections —have given rise among cybersecurity experts to theories that the attack masked a more nefarious campaign to seize sensitive data.

In its investigation of the incident, Twitter will now likely focus on employee logs, email and phone records. At question will be any failures in authentication processes that might have allowed hackers to hijack verified accounts, and also what other information, such as direct messages, might have been compromised in the breach. The Bitcoin wallets promoted in the tweets collected around $120,000 in cryptocurrency.

Twitter shares were down about 6% in pre-market trading on Thursday.

A social engineering attack means “leveraging the human element of security” and there are many different ways to do that, said Rachel Tobac, Chief Executive Officer of San Francisco-based SocialProof Security.

“I can phish someone who has administrative access and try and gain access to their credentials and log into their account,” she said, or the less technical method would be to develop “a relationship with someone who works on those panels and convincing them to do your bidding for you.”

Security awareness at companies like Twitter would be mandatory, but ultimately it’s hard to track insider attacks when it’s the employees rather than the technology who fall under the microscope, Tobac said.

“It used to be the Nigerian prince letter with a bunch of spelling mistakes, and now it’s something that almost looks legitimate, but it always starts with a person,” said Frances Dewing, the CEO of cybersecurity firm Rubica Inc., based in Seattle.

“There’s a playbook for doing this, there are cybercriminal organizations that make millions of dollars. It’s the fastest growing business in the world,” she said.

And there is no accounting for disaffected workers, as Twitter learned in 2017 when an employee deactivated President Donald Trump’s account before it was quickly restored.

Identifying potential Twitter employees to target wouldn’t be difficult for the hackers, given the way most smartphone apps hungrily vacuum up location and other contextual data from users —data which is often then sold on to marketing companies. Anyone frequenting the same coffee shops and businesses or entering and leaving a workplace at particular hours can give away clues about themselves.

Cybersecurity experts can only speculate until Twitter itself reveals what happened and where the failures occurred, but even this kind of show of force —a demonstration by hackers to earn credibility or gain infamy —isn’t convincing them that a Bitcoin scam was all there was to the operation.

With U.S. elections looming, the cyber landscape is ripe for a major attack. Stas Protassov, co-founder and president of global technology firm Acronis said the attack was “too prepared to be just a cryptocurrency scam.”

“We don’t believe that’s all the hackers went into once they got access,” he said in an email. “The attack is too big and too noisy and likely covering a bigger play. We’ve yet to see the full impact of what this was about.”

Tobac also raised the possibility that the attack could have been a distraction while hackers harvested private direct messages and any other confidential data to be able to deploy at a more critical time. So while the initial disruption to Twitter’s service appears to have been patched over and the company is gradually restoring normal operation, the lingering effects of this breach might have much wider effects than Wednesday’s spectacle.

“Maybe they were doing something insidious and this was just a cover up,” she said. “There’s no way for us to know, we can just speculate.”

Whatever happened, Twitter must be completely candid about the cause of attack once it’s established, Tobac said. “This was such a public meltdown that if they’re not completely transparent it would damage their brand further.”

Jamie Tarabay, Bloomberg News

Like us on Facebook and follow us on Twitter.

Want to support local journalism? Make a donation here.

social media

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

NDP headquarters on election night, Oct. 24, 2020. (Katya Slepian/Black Press Media)
ELECTION 2020: Live blog from B.C. party headquarters

BC NDP projected to win majority government – but celebrations will look different this election

North Coast BC NDP MLA Incumbent is seen with her wife Andrea Wilmot and their son Lua, as well as their dog Duncan. Preliminary results on election night Oct. 24 show Rice is in for a third term. (Photo: K-J Millar/The Northern View)
Jennifer Rice is North Coast MLA for third term

Preliminary election results show NDP Majority government

B.C. Green Party leader Sonia Furstenau outlines her party's climate action platform at Nanaimo's Vancouver Island Conference Centre earlier this month. (News Bulletin file photo)
Green leader Furstenau declared victor in her home riding on Vancouver Island

Cowichan Valley voters elect freshly minted party leader for her second term

John Horgan has been re-elected the MLA for Langford-Juan de Fuca. (File-Black Press)
Horgan trounces challengers to be re-elected in his Vancouver Island riding

MLA has represented constituency of Langford-Juan de Fuca and its predecessors since 2005

Poppy donation boxes have been delivered to restaurants, cafes, stores and places of businesses in Prince Rupert by the Royal Canadian Legion Branch 127 for the 2020 National Poppy Campaign. (Photo: K-J Millar/The Northern View)
National poppy campaign restricted by COVID-19

Prince Rupert Royal Canadian legion expects less donations to offer vital assistance to local vets

NDP Leader John Horgan celebrates his election win in the British Columbia provincial election in downtown Vancouver, B.C., Saturday, Oct. 24, 2020. THE CANADIAN PRESS/Jonathan Hayward
Horgan celebrates projected majority NDP government, but no deadline for $1,000 deposit

Premier-elect says majority government will allow him to tackle issues across all of B.C.

FILE – Prime Minister Justin Trudeau greets Premier John Horgan during a press conference at the BC Transit corporate office following an announcement about new investments to improve transit for citizens in the province while in Victoria on Thursday, July 18, 2019. THE CANADIAN PRESS/Chad Hipolito
Trudeau congratulates Horgan on NDP’s election victory in British Columbia

Final count won’t be available for three weeks due to the record number of 525,000 ballots cast by mail

Comedic actor Seth Rogen, right, and business partner Evan Goldberg pose in this undated handout photo. When actor Seth Rogen was growing up and smoking cannabis in Vancouver, he recalls there was a constant cloud of shame around the substance that still lingers. Rogen is determined to change that. (Maarten de Boer ohoto)
Seth Rogen talks about fighting cannabis stigma, why pot should be as accepted as beer

‘I smoke weed all day and every day and have for 20 years’

Provincial Green Party leader Sonia Furstenau speaks at Provincial Green Party headquarters at the Delta Victoria Ocean Pointe in Victoria. (Arnold Lim / Black Press)
VIDEO: Furstenau leads BC Greens to win first riding outside of Vancouver Island

Sonia Furstenau became leader of BC Greens one week before snap election was called

NDP Leader John Horgan elbow bumps NDP candidate Coquitlam-Burke Mountain candidate Fin Donnelly following a seniors round table in Coquitlam, B.C., Tuesday, October 20, 2020. THE CANADIAN PRESS/Jonathan Hayward
Horgan, NDP head for majority in B.C. election results

Record number of mail-in ballots may shift results

Join Black Press Media and Do Some Good

Pay it Forward program supports local businesses in their community giving

The Canadian border is pictured at the Peace Arch Canada/USA border crossing in Surrey, B.C. Friday, March 20, 2020. More than 4.6 million people have arrived in Canada since the border closed last March and fewer than one-quarter of them were ordered to quarantine while the rest were deemed “essential” and exempted from quarantining. THE CANADIAN PRESS/Jonathan Hayward
Majority of international travellers since March deemed ‘essential’, avoid quarantine

As of Oct. 20, 3.5 million travellers had been deemed essential, and another 1.1 million were considered non-essential

Canada’s Chief Public Health Officer Theresa Tam responds to a question during a news conference Friday October 23, 2020 in Ottawa. Canada’s top physician says she fears the number of COVID-19 hospitalizations and deaths may increase in the coming weeks as the second wave continues to drive the death toll toward 10,000. THE CANADIAN PRESS/Adrian Wyld
Canada’s top doctor warns severe illness likely to rise, trailing spike in COVID-19 cases

Average daily deaths from virus reached 23 over the past seven days, up from six deaths six weeks ago

Most Read