Twitter logo. (AP Photo/Jeff Chiu)

Twitter logo. (AP Photo/Jeff Chiu)

Twitter racing to unravel mystery cyberattack

Some of the world’s most prominent names had their Twitter accounts post invitations for an apparent Bitcoin scam

As Twitter Inc. grapples with the worst security breach in its 14-year history, it must now uncover whether its employees were victims of sophisticated phishing schemes or if they deliberately allowed hackers to access high-profile accounts.

On Wednesday, some of the world’s most prominent names, including former president Barack Obama and Democratic candidate and his former vice president Joe Biden, along with Bill Gates, Elon Musk and Warren Buffett, had their Twitter accounts post invitations for an apparent Bitcoin scam. Twitter reacted by blocking further posts from all verified accounts on the service and said it had detected “a coordinated social engineering attack by people who successfully targeted some of our employees with access to internal systems and tools.”

The company’s explanation has ignited speculation over the identity of the perpetrators and what they were actually targeting in the attack. The scale of the endeavor and its timing —months before the November U.S. elections —have given rise among cybersecurity experts to theories that the attack masked a more nefarious campaign to seize sensitive data.

In its investigation of the incident, Twitter will now likely focus on employee logs, email and phone records. At question will be any failures in authentication processes that might have allowed hackers to hijack verified accounts, and also what other information, such as direct messages, might have been compromised in the breach. The Bitcoin wallets promoted in the tweets collected around $120,000 in cryptocurrency.

Twitter shares were down about 6% in pre-market trading on Thursday.

A social engineering attack means “leveraging the human element of security” and there are many different ways to do that, said Rachel Tobac, Chief Executive Officer of San Francisco-based SocialProof Security.

“I can phish someone who has administrative access and try and gain access to their credentials and log into their account,” she said, or the less technical method would be to develop “a relationship with someone who works on those panels and convincing them to do your bidding for you.”

Security awareness at companies like Twitter would be mandatory, but ultimately it’s hard to track insider attacks when it’s the employees rather than the technology who fall under the microscope, Tobac said.

“It used to be the Nigerian prince letter with a bunch of spelling mistakes, and now it’s something that almost looks legitimate, but it always starts with a person,” said Frances Dewing, the CEO of cybersecurity firm Rubica Inc., based in Seattle.

“There’s a playbook for doing this, there are cybercriminal organizations that make millions of dollars. It’s the fastest growing business in the world,” she said.

And there is no accounting for disaffected workers, as Twitter learned in 2017 when an employee deactivated President Donald Trump’s account before it was quickly restored.

Identifying potential Twitter employees to target wouldn’t be difficult for the hackers, given the way most smartphone apps hungrily vacuum up location and other contextual data from users —data which is often then sold on to marketing companies. Anyone frequenting the same coffee shops and businesses or entering and leaving a workplace at particular hours can give away clues about themselves.

Cybersecurity experts can only speculate until Twitter itself reveals what happened and where the failures occurred, but even this kind of show of force —a demonstration by hackers to earn credibility or gain infamy —isn’t convincing them that a Bitcoin scam was all there was to the operation.

With U.S. elections looming, the cyber landscape is ripe for a major attack. Stas Protassov, co-founder and president of global technology firm Acronis said the attack was “too prepared to be just a cryptocurrency scam.”

“We don’t believe that’s all the hackers went into once they got access,” he said in an email. “The attack is too big and too noisy and likely covering a bigger play. We’ve yet to see the full impact of what this was about.”

Tobac also raised the possibility that the attack could have been a distraction while hackers harvested private direct messages and any other confidential data to be able to deploy at a more critical time. So while the initial disruption to Twitter’s service appears to have been patched over and the company is gradually restoring normal operation, the lingering effects of this breach might have much wider effects than Wednesday’s spectacle.

“Maybe they were doing something insidious and this was just a cover up,” she said. “There’s no way for us to know, we can just speculate.”

Whatever happened, Twitter must be completely candid about the cause of attack once it’s established, Tobac said. “This was such a public meltdown that if they’re not completely transparent it would damage their brand further.”

Jamie Tarabay, Bloomberg News

Like us on Facebook and follow us on Twitter.

Want to support local journalism? Make a donation here.

social media

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

The Mann family lived in a coach house attached to the old stables – which once stood across from where the beer bottles were found – from about 1911 to the '30s. This historical photograph shows members of the Mann family passing around a beer bottle similar to the ones found recently. (Photos courtesy Cindy MacDougall)
Cheers to history: 100-year-old beer bottles unearthed at Royal Roads University

Four bottles from Victoria Brewing Co., Silver Springs Brewery date back to early 1900s

Tighe Archer with a Winter Tree that he cut and assembled in Esquimalt High wood shop. Students in ten high school wood shops are cutting the raw materials and packaging them into kits that are delivered to Grade 3 and 4 elementary classes in the district to assemble. 
(Lindsay Johnson Photo)
Greater Victoria high schoolers cut Winter Trees for Grade 3 classes

Apprenticing carpentry students bring a little season to younger peers

Evelyn Turner, Jen Rashleigh and Steve Duck with Circular Farm and Food: Vancouver Island stand outside the Sandown Agricultural Lands, future site of the Sandown Centre for Regenerative Agriculture. North Saanich council is considering a draft agreement with the future operators for final approval Monday. (Wolf Depner/News Staff)
North Saanich close to inking final agreement with Sandown operators

Future operators of Sandown Agricultural Lands have confidence in their vision

Victoria-based driving instructors are concerned for their own and the community’s safety with the continued number of residents from COVID hotspots in the Lower Mainland coming to the city to take their driving road tests. (Black Press Media file photo)
Students from COVID hotspots travel to Victoria for driving tests

Union leader calls on government to institute stronger travel ban

(Courtesy Saanich Police Dept.)
Police hope boot search will help find missing Saanich man

Sean Hart is known to walk for miles, with or without his boots

Unofficial holidays: Here’s what people are celebrating for the week of Dec. 6 to 12

Mountain Day, Dewey Decimal System Day and Lard Day are all coming up this week

Demonstrators, organized by the Public Fishery Alliance, outside the downtown Vancouver offices of Fisheries and Oceans Canada July 6 demand the marking of all hatchery chinook to allow for a sustainable public fishery while wild stocks recover. (Public Fishery Alliance Facebook photo)
Angry B.C. anglers see petition tabled in House of Commons

Salmon fishers demand better access to the healthy stocks in the public fishery

(Hotel Zed/Flytographer)
B.C. hotel grants couple 18 years of free stays after making baby on Valentines Day

Hotel Zed has announced a Kelowna couple has received free Valentines Day stays for next 18 years

Farmers raise slogans during a protest on a highway at the Delhi-Haryana state border, India, Thursday, Dec. 3, 2020. Prime Minister Justin Trudeau rejected the diplomatic scolding Canada’s envoy to India received on Friday for his recent comments in support of protesting Indian farmers. Tens of thousands of farmers have descended upon the borders of New Delhi to protest new farming laws that they say will open them to corporate exploitation. THE CANADIAN PRESS/AP-Manish Swarup
Trudeau brushes off India’s criticism for standing with farmers in anti-Modi protests

The High Commission of India in Ottawa had no comment when contacted Friday

Montreal Alouettes’ Michael Sam is set to make his pro football debut as he warms up before the first half of a CFL game against the Ottawa Redblacks in Ottawa on Friday, Aug. 7, 2015. Sam became the first publicly gay player to be drafted in the NFL. He signed with the Montreal Alouettes after being released by St. Louis, but abruptly left after playing one game. THE CANADIAN PRESS/Justin Tang
Study finds Canada a ‘laggard’ on homophobia in sports

Among females, 44 per cent of Canadians who’ve come out to teammates reported being victimized

Nurse Kath Olmstead prepares a shot as the world’s biggest study of a possible COVID-19 vaccine, developed by the National Institutes of Health and Moderna Inc., gets underway Monday, July 27, 2020, in Binghamton, N.Y. U.S. biotech firm Moderna says its vaccine is showing signs of producing lasting immunity to COVID-19, and that it will have as many as many as 125 million doses available by the end of March. THE CANADIAN PRESS/AP-Hans Pennink
Canada orders more COVID vaccines, refines advice on first doses as cases reach 400K

Canada recorded its 300,000th case of COVID-19 on Nov. 16

Apartments are seen lit up in downtown Vancouver as people are encouraged to stay home during the global COVID-19 pandemic on Thursday, Dec. 3, 2020. British Columbia’s deputy provincial health officer says provincewide data show the most important area B.C. must tackle in its response to the COVID-19 pandemic is health inequity. THE CANADIAN PRESS/Marissa Tiel
Age, income among top factors affecting well-being during pandemic, B.C. survey shows

Among respondents earning $20,000 a year or less, more than 41 per cent reported concern about food insecurity

Information about the number of COVID-19 cases in Abbotsford and other municipalities poses a danger to the public, the Provincial Health Services Authority says. (Photo: Tyler Olsen/Abbotsford News)
More city-level COVID-19 data would jeopardize public health, B.C. provincial health agency says

Agency refuses to release weekly COVID-19 case counts, citing privacy and public health concerns

The opening day on Mount Washington this year was Dec. 4. Screenshot
Mount Washington opens on time, COVID-19 protocols in place

“We’re super excited - it’s been six months in the planning.”

Most Read