Twitter logo. (AP Photo/Jeff Chiu)

Twitter logo. (AP Photo/Jeff Chiu)

Twitter racing to unravel mystery cyberattack

Some of the world’s most prominent names had their Twitter accounts post invitations for an apparent Bitcoin scam

As Twitter Inc. grapples with the worst security breach in its 14-year history, it must now uncover whether its employees were victims of sophisticated phishing schemes or if they deliberately allowed hackers to access high-profile accounts.

On Wednesday, some of the world’s most prominent names, including former president Barack Obama and Democratic candidate and his former vice president Joe Biden, along with Bill Gates, Elon Musk and Warren Buffett, had their Twitter accounts post invitations for an apparent Bitcoin scam. Twitter reacted by blocking further posts from all verified accounts on the service and said it had detected “a coordinated social engineering attack by people who successfully targeted some of our employees with access to internal systems and tools.”

The company’s explanation has ignited speculation over the identity of the perpetrators and what they were actually targeting in the attack. The scale of the endeavor and its timing —months before the November U.S. elections —have given rise among cybersecurity experts to theories that the attack masked a more nefarious campaign to seize sensitive data.

In its investigation of the incident, Twitter will now likely focus on employee logs, email and phone records. At question will be any failures in authentication processes that might have allowed hackers to hijack verified accounts, and also what other information, such as direct messages, might have been compromised in the breach. The Bitcoin wallets promoted in the tweets collected around $120,000 in cryptocurrency.

Twitter shares were down about 6% in pre-market trading on Thursday.

A social engineering attack means “leveraging the human element of security” and there are many different ways to do that, said Rachel Tobac, Chief Executive Officer of San Francisco-based SocialProof Security.

“I can phish someone who has administrative access and try and gain access to their credentials and log into their account,” she said, or the less technical method would be to develop “a relationship with someone who works on those panels and convincing them to do your bidding for you.”

Security awareness at companies like Twitter would be mandatory, but ultimately it’s hard to track insider attacks when it’s the employees rather than the technology who fall under the microscope, Tobac said.

“It used to be the Nigerian prince letter with a bunch of spelling mistakes, and now it’s something that almost looks legitimate, but it always starts with a person,” said Frances Dewing, the CEO of cybersecurity firm Rubica Inc., based in Seattle.

“There’s a playbook for doing this, there are cybercriminal organizations that make millions of dollars. It’s the fastest growing business in the world,” she said.

And there is no accounting for disaffected workers, as Twitter learned in 2017 when an employee deactivated President Donald Trump’s account before it was quickly restored.

Identifying potential Twitter employees to target wouldn’t be difficult for the hackers, given the way most smartphone apps hungrily vacuum up location and other contextual data from users —data which is often then sold on to marketing companies. Anyone frequenting the same coffee shops and businesses or entering and leaving a workplace at particular hours can give away clues about themselves.

Cybersecurity experts can only speculate until Twitter itself reveals what happened and where the failures occurred, but even this kind of show of force —a demonstration by hackers to earn credibility or gain infamy —isn’t convincing them that a Bitcoin scam was all there was to the operation.

With U.S. elections looming, the cyber landscape is ripe for a major attack. Stas Protassov, co-founder and president of global technology firm Acronis said the attack was “too prepared to be just a cryptocurrency scam.”

“We don’t believe that’s all the hackers went into once they got access,” he said in an email. “The attack is too big and too noisy and likely covering a bigger play. We’ve yet to see the full impact of what this was about.”

Tobac also raised the possibility that the attack could have been a distraction while hackers harvested private direct messages and any other confidential data to be able to deploy at a more critical time. So while the initial disruption to Twitter’s service appears to have been patched over and the company is gradually restoring normal operation, the lingering effects of this breach might have much wider effects than Wednesday’s spectacle.

“Maybe they were doing something insidious and this was just a cover up,” she said. “There’s no way for us to know, we can just speculate.”

Whatever happened, Twitter must be completely candid about the cause of attack once it’s established, Tobac said. “This was such a public meltdown that if they’re not completely transparent it would damage their brand further.”

Jamie Tarabay, Bloomberg News

Like us on Facebook and follow us on Twitter.

Want to support local journalism? Make a donation here.

social media

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

Sheriff Avory Chapman was last seen Jan. 20 on Wellington Avenue in Chilliwack. (RCMP)
RCMP look for missing man last seen in downtown Chilliwack

21-year-old Sheriff Avory Chapman has been missing since Jan. 20

A worker is seen throwing a chicken in an undercover video in 2017 filmed by California-based animal rights activists Mercy For Animals.
Fraser Valley chicken abuse trial delayed until February

Originally scheduled for a jury trial, Sofina and Chilliwack company now face judge alone

Recently elected NDP MLA Kelli Paddon is funding three $500 scholarships for students demonstrating a commitment to equity and social change. (Black Press file photo)
Chilliwack-Kent MLA Kelli Paddon funding Equity and Social Change Scholarships

One of the scholarships is open to any graduating student in the Chilliwack-Kent electoral district

Paid parking returns to Harrison from May 15 to Sept. 15. (Nina Grossman/The Observer)
Harrison pay parking to arrive May 15, parking master plan in the works

The village will be looking at parking for the community as a whole in the new plan

Crews with Discovery Channel film as an Aggressive Towing driver moves a Grumman S2F Tracker aircraft around a 90-degree turn from its compound and onto the road on Saturday, Jan. 23, 2021. It was the “most difficult” part of the move for the airplane, one organizer said. (Jenna Hauck/ Chilliwack Progress)
VIDEO: Vintage military plane towed across Chilliwack over weekend

Grumman CP-121 Tracker’s eventual home the British Columbia Aviation Museum on Vancouver Island

Rose Sawka, 91, waves to her son through the window of a care home in Prince Rupert in October. Residents of the care home received their first vaccine dose Jan. 20. (K-J Millar/The Northern View)
B.C. care home visitor access to expand by March, Dix says

Staff, residents, essential visitors top priorities for vaccine

The SACH Community Hub team, from left to right: Upkar Singh Tatlay, Gary Thandi, Allysha Ram, Jassy Pandher, Harman Pander. (Submitted photo)
There’s help for South Asian men wrestling with drug addiction in Surrey

South Asian deaths related to toxic drugs increased by 255 per cent between 2015 and 2018

The Independent Investigations Office of BC (IIO) is looking into the death of man discovered Jan. 11 in east Maple Ridge. (Black Press files)
B.C.’s police watchdog investigating man’s death in Maple Ridge

Man was found dead Jan. 11 after recent contact with police

Chilliwack Law Courts. (Black Press file)
Man sentenced to 20 months for sexual offences involving a minor in Mission

Will Laws Clark was 22 and victim was 13 at time offences began

Rolling seven-day average of cases by B.C. health authority to Jan. 21. Fraser Health in purple, Vancouver Coastal red, Interior Health orange, Northern Health green and Vancouver Island blue. (B.C. Centre for Disease Control)
2nd COVID vaccine doses on hold as B.C. delivery delayed again

New COVID-19 cases slowing in Fraser Health region

Join Black Press Media and Do Some Good
Join Black Press Media and Do Some Good

Pay it Forward program supports local businesses in their community giving

Cannabis bought in British Columbia (Ashley Wadhwani/Black Press Media)
Is it time to start thinking about greener ways to package cannabis?

Packaging suppliers are still figuring eco-friendly and affordable packaging options that fit the mandates of Cannabis Regulations

Provincial health officer Dr. Bonnie Henry talk about the next steps in B.C.’s COVID-19 Immunization Plan during a press conference at Legislature in Victoria, B.C., on Friday, January 22, 2021. Two more cases of the COVID-19 strain first identified in South Africa have been diagnosed in British Columbia, bringing the total to three as of Jan. 16.THE CANADIAN PRESS/Chad Hipolito
B.C. now has three cases of South African COVID-19 variant, six of U.K. strain

Both variants are thought to spread faster than earlier strains

Rodney and Ekaterina Baker in an undated photo from social media. The couple has been ticketed and charged under the Yukon’s <em>Civil Emergency Measures Act</em> for breaking isolation requirements in order to sneak into a vaccine clinic and receive Moderna vaccine doses in Beaver Creek. (Facebook/Submitted)
Great Canadian Gaming CEO resigns after being accused of sneaking into Yukon for vaccine

Rod Baker and Ekaterina Baker were charged with two CEMA violations each

Most Read