San Francisco, July 31 (SocialNews.XYZ) The massive Twitter hack earlier this month that spread a cryptocurrency scam by hajacking accounts of high-profile celebrities, politicians and businesses was a result of a phone spear phishing attack, the social media platform has revealed.
"A successful attack required the attackers to obtain access to both our internal network as well as specific employee credentials that granted them access to our internal support tools," Twitter said in an update on its investigation to the issue on Thursday.
The attackers targeted 130 Twitter accounts, ultimately tweeting from 45, accessing the DM (Direct Messages) inbox of 36, and downloading the Twitter Data of 7.
In the incident that occurred on July 15, accounts of major public figures including Barack Obama, Elon Musk, Bill Gates, Jeff Bezos, US Democratic presidential candidate Joe Biden, Apple, Uber were simultaneously hacked by attackers to spread a bitcoin scam.
The incident raised concerns around Twitter tools and levels of employee access.
Twitter said it has "zero tolerance" for misuse of credentials or tools, actively monitors for misuse, regularly audits permissions, and takes immediate action if anyone accesses account information without a valid business reason.
"Since the attack, we've significantly limited access to our internal tools and systems to ensure ongoing account security while we complete our investigation," Twitter said.
As a result, some features -- namely, accessing the Your Twitter Data download feature -- and processes have been impacted.
Twitter said it will be slower to respond to account support needs, reported tweets, and applications to its developer platform.
"We're sorry for any delays this causes, but we believe it's a necessary precaution as we make durable changes to our processes and tooling as a result of this incident," Twitter said.
"We will gradually resume our normal response times when we're confident it's safe to do so," the company added.
Twitter said its investigation is ongoing, and it is working with the appropriate authorities to ensure that the people responsible for this attack are identified.
Source: IANS
About Gopi
Gopi Adusumilli is a Programmer. He is the editor of SocialNews.XYZ and President of AGK Fire Inc.
He enjoys designing websites, developing mobile applications and publishing news articles on current events from various authenticated news sources.
When it comes to writing he likes to write about current world politics and Indian Movies. His future plans include developing SocialNews.XYZ into a News website that has no bias or judgment towards any.
He can be reached at gopi@socialnews.xyz