Twitter logo. (AP Photo/Jeff Chiu)

Twitter logo. (AP Photo/Jeff Chiu)

Twitter racing to unravel mystery cyberattack

Some of the world’s most prominent names had their Twitter accounts post invitations for an apparent Bitcoin scam

As Twitter Inc. grapples with the worst security breach in its 14-year history, it must now uncover whether its employees were victims of sophisticated phishing schemes or if they deliberately allowed hackers to access high-profile accounts.

On Wednesday, some of the world’s most prominent names, including former president Barack Obama and Democratic candidate and his former vice president Joe Biden, along with Bill Gates, Elon Musk and Warren Buffett, had their Twitter accounts post invitations for an apparent Bitcoin scam. Twitter reacted by blocking further posts from all verified accounts on the service and said it had detected “a coordinated social engineering attack by people who successfully targeted some of our employees with access to internal systems and tools.”

The company’s explanation has ignited speculation over the identity of the perpetrators and what they were actually targeting in the attack. The scale of the endeavor and its timing —months before the November U.S. elections —have given rise among cybersecurity experts to theories that the attack masked a more nefarious campaign to seize sensitive data.

In its investigation of the incident, Twitter will now likely focus on employee logs, email and phone records. At question will be any failures in authentication processes that might have allowed hackers to hijack verified accounts, and also what other information, such as direct messages, might have been compromised in the breach. The Bitcoin wallets promoted in the tweets collected around $120,000 in cryptocurrency.

Twitter shares were down about 6% in pre-market trading on Thursday.

A social engineering attack means “leveraging the human element of security” and there are many different ways to do that, said Rachel Tobac, Chief Executive Officer of San Francisco-based SocialProof Security.

“I can phish someone who has administrative access and try and gain access to their credentials and log into their account,” she said, or the less technical method would be to develop “a relationship with someone who works on those panels and convincing them to do your bidding for you.”

Security awareness at companies like Twitter would be mandatory, but ultimately it’s hard to track insider attacks when it’s the employees rather than the technology who fall under the microscope, Tobac said.

“It used to be the Nigerian prince letter with a bunch of spelling mistakes, and now it’s something that almost looks legitimate, but it always starts with a person,” said Frances Dewing, the CEO of cybersecurity firm Rubica Inc., based in Seattle.

“There’s a playbook for doing this, there are cybercriminal organizations that make millions of dollars. It’s the fastest growing business in the world,” she said.

And there is no accounting for disaffected workers, as Twitter learned in 2017 when an employee deactivated President Donald Trump’s account before it was quickly restored.

Identifying potential Twitter employees to target wouldn’t be difficult for the hackers, given the way most smartphone apps hungrily vacuum up location and other contextual data from users —data which is often then sold on to marketing companies. Anyone frequenting the same coffee shops and businesses or entering and leaving a workplace at particular hours can give away clues about themselves.

Cybersecurity experts can only speculate until Twitter itself reveals what happened and where the failures occurred, but even this kind of show of force —a demonstration by hackers to earn credibility or gain infamy —isn’t convincing them that a Bitcoin scam was all there was to the operation.

With U.S. elections looming, the cyber landscape is ripe for a major attack. Stas Protassov, co-founder and president of global technology firm Acronis said the attack was “too prepared to be just a cryptocurrency scam.”

“We don’t believe that’s all the hackers went into once they got access,” he said in an email. “The attack is too big and too noisy and likely covering a bigger play. We’ve yet to see the full impact of what this was about.”

Tobac also raised the possibility that the attack could have been a distraction while hackers harvested private direct messages and any other confidential data to be able to deploy at a more critical time. So while the initial disruption to Twitter’s service appears to have been patched over and the company is gradually restoring normal operation, the lingering effects of this breach might have much wider effects than Wednesday’s spectacle.

“Maybe they were doing something insidious and this was just a cover up,” she said. “There’s no way for us to know, we can just speculate.”

Whatever happened, Twitter must be completely candid about the cause of attack once it’s established, Tobac said. “This was such a public meltdown that if they’re not completely transparent it would damage their brand further.”

Jamie Tarabay, Bloomberg News

Like us on Facebook and follow us on Twitter.

Want to support local journalism? Make a donation here.

social media

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

Vaccinations are set to resume in the small community of Tatchet, according to Lake Babine Nation’s Deputy Chief. (Black Press Media file photo)
Lake Babine Nation vaccine rollout resumes after a short pause

A COVID positive test within the care team had put the vaccinations on hold

Cheslatta Chief Corrina Leween received one of the COVID-19 vaccines on the Southside, on Wednesday, Jan. 13. (Submitted/Lakes District News)
COVID-19 vaccination begins in Burns Lake

Senior population, health care workers and First Nations among the first to get the vaccine

Sasquatch sighting. (Omineca Ski Club photo/Lakes District News)
Sasquatch on the loose at Omineca Ski Club

Head out to the trails to see if you can spot it; a tongue-in-cheek response from the club President

Two books in particular became quite popular at the start of the pandemic — Soap and Water Common Sense, The definitive guide to viruses’ bacteria, parasites, and disease and The Great Influenza, The story of the deadliest pandemic in history. (Priyanka Ketkar photo/Lakes District News)
Burns Lake Public Library lent 20,916 books in 2020

Gained 67 new patrons throughout the year

A scene from “Canada and the Gulf War: In their own words,” a video by The Memory Project, a program of Historica Canada, is shown in this undated illustration. THE CANADIAN PRESS/HO - Historica Canada
New video marks Canada’s contributions to first Gulf War on 30th anniversary

Veterans Affairs Canada says around 4,500 Canadian military personnel served during the war

A 17-year-old snowmobiler used his backcountry survival sense in preparation to spend the night on the mountain near 100 Mile House Saturday, Jan. 16, 2021 after getting lost. (South Cariboo Search and Rescue Facebook photo)
Teen praised for backcountry survival skills after getting lost in B.C.’s Cariboo mountains

“This young man did everything right after things went wrong.”

Conservative Leader Erin O’Toole holds a press conference on Parliament Hill, in Ottawa on December 10, 2020. THE CANADIAN PRESS/Sean Kilpatrick
No place for ‘far right’ in Conservative Party, Erin O’Toole says

O’Toole condemned the Capitol attack as ‘horrifying’ and sought to distance himself and the Tories from Trumpism

A passer by walks in High Park, in Toronto, Thursday, Jan. 14, 2021. This workweek will kick off with what’s fabled to be the most depressing day of the year, during one of the darkest eras in recent history. THE CANADIAN PRESS/Chris Young
‘Blue Monday’ getting you down? Exercise may be the cure, say experts

Many jurisdictions are tightening restrictions to curb soaring COVID-19 case counts

A health-care worker prepares a dose of the Pfizer-BioNTech COVID-19 vaccine at a UHN COVID-19 vaccine clinic in Toronto on Thursday, January 7, 2021. THE CANADIAN PRESS/Nathan Denette
COVID-19: Provinces work on revised plans as Pfizer-BioNTech shipments to slow down

Anita Anand said she understands and shares Canadians’ concerns about the drug company’s decision

Tourists take photographs outside the British Columbia Legislature in Victoria, B.C., on Friday August 26, 2011. A coalition of British Columbia tourism industry groups is urging the provincial government to not pursue plans to ban domestic travel to fight the spread of COVID-19. THE CANADIAN PRESS/Darryl Dyck
B.C. travel ban will harm struggling tourism sector, says industry coalition

B.C. government would have to show evidence a travel ban is necessary

(Phil McLachlan - Capital News)
‘Targeted’ shooting in Coquitlam leaves woman in hospital

The woman suffered non-life threatening injuries in what police believe to be a targeted shooting Saturday morning

JaHyung Lee, “Canada’s oldest senior” at 110 years old, received his first dose of the COVID-19 vaccine on Thursday, Jan. 14, 2021. He lives at Amenida Seniors Community in Newton. (Submitted photo: Amenida Seniors Community)
A unique-looking deer has been visiting a Nanoose Bay property with its mother. (Frieda Van der Ree photo)
A deer with 3 ears? Unique animal routinely visits B.C. property

Experts say interesting look may be result of an injury rather than an odd birth defect

Most Read