Twitter logo. (AP Photo/Jeff Chiu)

Twitter logo. (AP Photo/Jeff Chiu)

Twitter racing to unravel mystery cyberattack

Some of the world’s most prominent names had their Twitter accounts post invitations for an apparent Bitcoin scam

As Twitter Inc. grapples with the worst security breach in its 14-year history, it must now uncover whether its employees were victims of sophisticated phishing schemes or if they deliberately allowed hackers to access high-profile accounts.

On Wednesday, some of the world’s most prominent names, including former president Barack Obama and Democratic candidate and his former vice president Joe Biden, along with Bill Gates, Elon Musk and Warren Buffett, had their Twitter accounts post invitations for an apparent Bitcoin scam. Twitter reacted by blocking further posts from all verified accounts on the service and said it had detected “a coordinated social engineering attack by people who successfully targeted some of our employees with access to internal systems and tools.”

The company’s explanation has ignited speculation over the identity of the perpetrators and what they were actually targeting in the attack. The scale of the endeavor and its timing —months before the November U.S. elections —have given rise among cybersecurity experts to theories that the attack masked a more nefarious campaign to seize sensitive data.

In its investigation of the incident, Twitter will now likely focus on employee logs, email and phone records. At question will be any failures in authentication processes that might have allowed hackers to hijack verified accounts, and also what other information, such as direct messages, might have been compromised in the breach. The Bitcoin wallets promoted in the tweets collected around $120,000 in cryptocurrency.

Twitter shares were down about 6% in pre-market trading on Thursday.

A social engineering attack means “leveraging the human element of security” and there are many different ways to do that, said Rachel Tobac, Chief Executive Officer of San Francisco-based SocialProof Security.

“I can phish someone who has administrative access and try and gain access to their credentials and log into their account,” she said, or the less technical method would be to develop “a relationship with someone who works on those panels and convincing them to do your bidding for you.”

Security awareness at companies like Twitter would be mandatory, but ultimately it’s hard to track insider attacks when it’s the employees rather than the technology who fall under the microscope, Tobac said.

“It used to be the Nigerian prince letter with a bunch of spelling mistakes, and now it’s something that almost looks legitimate, but it always starts with a person,” said Frances Dewing, the CEO of cybersecurity firm Rubica Inc., based in Seattle.

“There’s a playbook for doing this, there are cybercriminal organizations that make millions of dollars. It’s the fastest growing business in the world,” she said.

And there is no accounting for disaffected workers, as Twitter learned in 2017 when an employee deactivated President Donald Trump’s account before it was quickly restored.

Identifying potential Twitter employees to target wouldn’t be difficult for the hackers, given the way most smartphone apps hungrily vacuum up location and other contextual data from users —data which is often then sold on to marketing companies. Anyone frequenting the same coffee shops and businesses or entering and leaving a workplace at particular hours can give away clues about themselves.

Cybersecurity experts can only speculate until Twitter itself reveals what happened and where the failures occurred, but even this kind of show of force —a demonstration by hackers to earn credibility or gain infamy —isn’t convincing them that a Bitcoin scam was all there was to the operation.

With U.S. elections looming, the cyber landscape is ripe for a major attack. Stas Protassov, co-founder and president of global technology firm Acronis said the attack was “too prepared to be just a cryptocurrency scam.”

“We don’t believe that’s all the hackers went into once they got access,” he said in an email. “The attack is too big and too noisy and likely covering a bigger play. We’ve yet to see the full impact of what this was about.”

Tobac also raised the possibility that the attack could have been a distraction while hackers harvested private direct messages and any other confidential data to be able to deploy at a more critical time. So while the initial disruption to Twitter’s service appears to have been patched over and the company is gradually restoring normal operation, the lingering effects of this breach might have much wider effects than Wednesday’s spectacle.

“Maybe they were doing something insidious and this was just a cover up,” she said. “There’s no way for us to know, we can just speculate.”

Whatever happened, Twitter must be completely candid about the cause of attack once it’s established, Tobac said. “This was such a public meltdown that if they’re not completely transparent it would damage their brand further.”

Jamie Tarabay, Bloomberg News

Like us on Facebook and follow us on Twitter.

Want to support local journalism? Make a donation here.

social media

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

Langley letter writer hopes after seeing how Willoughby developed, the Township protects Walnut Grove green spaces. (Langley Advance Times file)
LETTER: Walnut Grove resident cherishes Langley’s green spaces

Willoughby was allowed to develop without enough consideration for nature, writer says

Motorists breaking travel rules can be fined $230 for failing to follow instructions or $575 if the reason for travel violates the essential travel health order, at this Highway 3 check area near Manning Park. Photo RCMP
RCMP begin stopping drivers on BC highways – check point at Manning Park

Four check points are set up Thursday May 6 around the province

The Aquilini Investment Group has agreed to a proposed contract of five years to run the Abbotsford Centre. (File photo)
Proposal to run Abbotsford Centre offered to Canucks ownership group

Planned five-year contract to cost city $750K annually, starting Jan. 1, 2022

Integrated Homicide Investigation Team Sgt. Frank Jang said outside of Langley Sportsplex at 91a Ave and 200 Street after a man was fatally shot in April 2021. (Black Press Media file)
LETTER: Casual drug users have link to gang killings, says Langley letter writer

The Lower Mainland is in the midst of another gang war and the illicit drug market is part of it

Dr. Bonnie Henry B.C.’s provincial health officer, updates the COVID-19 situation at the B.C. legislature, April 29, 2021. (B.C. government)
BREAKING: Willoughby added to list of high-transmission COVID zones

Anyone 30 and over in the area can now register for a vaccine

Protesters attempt to stop clear-cutting of old-growth trees in Fairy Creek near Port Renfrew. (Will O’Connell photo)
VIDEO: Workers, activists clash at site of Vancouver Island logging operation

Forest license holders asking for independent investigation into incident

Surrey RCMP is investigating after a serious three-vehicle crash at the intersection of King George Boulevard and 128th Street Thursday afternoon (May 6, 2021). (Photo: Shane MacKichan)
VIDEO: Serious crash in Surrey sends 1 to hospital

Surrey RCMP say one of the drivers fled on foot, but was later found at an area hospital

Starting Tuesday, May 11, B.C. adults born in 1981 and earlier will be able to register for a vaccine dose. (Haley Ritchie/Black Press Media)
BC adults 40+ eligible to book COVID-19 vaccinations next week

Starting Tuesday, people born in 1981 and earlier will be able to schedule their inoculation against the virus

John Paul Fraser, executive director of the BC Salmon Farmers Association. (Screen shot)
Salmon farmers warn Surrey jobs on line as feds end Discovery Islands operations

344 full-time jobs at risk in Surrey and 1,189 B.C.-wide

Cannabis bought in British Columbia (Ashley Wadhwani/Black Press Media)
Is it time to start thinking about greener ways to package cannabis?

Packaging suppliers are still figuring eco-friendly and affordable packaging options that fit the mandates of Cannabis Regulations

Parks Canada and Tla-o-qui-aht Tribal Parks dig the washed up Princess M out from sand along the south shore of the Pacific Rim National Park Reserve. (Nora O’Malley photo)
Rescue attempt costs man his boat off Pacific Rim National Park Reserve

Coast Guard response questioned after volunteer responder’s speedboat capsizes in heavy swells

Al Kowalko shows off the province’s first electric school bus, running kids to three elementary and two secondary schools on the West Shore. (Zoe Ducklow/News Staff)
B.C.’s first electric school bus making the rounds in Victoria suburbs

No emissions, no fuel costs and less maintenance will offset the $750K upfront expense

Road sign on Highway 1 west of Hope warns drivers of COVID-19 essential travel road checks on the highways into the B.C. Interior. (Jessica Peters/Chilliwack Progress)
B.C. residents want travel checks at Alberta border, MLA says

Police road checks in place at highways out of Vancouver area

Victoria police say the photo they circulated of an alleged cat thief was actually a woman taking her own cat to the vet. (Black Press Media File Photo)
Photo of suspected cat thief released by Victoria police actually just woman with her pet

Police learned the she didn’t steal Penelope the cat, and was actually taking her cat to the vet

Most Read