Bitcoin Forum

Bill gates, Elon Musk, Cashapp, and many other twitter accounts got hacked too

I doubt their accounts were hacked directly.

Somebody either breached some third-party API posting service or the cell carrier these people used, hence resetting their 2FA methods.

Logically, if something was breached on Twitter's side, they would have just shut the whole site down rather than risk the fallout that's currently occuring.

Twitter shares have down 5% ATM despite doing well earlier today, so I guess investors aren't happy either way.

A lot of unconfirmed rumors that a twitter employee with access to the user management panel was hacked. But I find that hard to believe. I guess we’ll just have to wait for official announcements.

This is massive, different personalities were being hacked and also the official twitter handlers were hacked too. Is there something with the twitter back-end and this was able to happen?

I'll wait what Jack Dorsey will say on this.

~
Finally some twitter reaction.

I smell a false flag here.

Accounts with millions of followers , Obama, Biden, Gates, Musk, Bezos involved. https://www.zerohedge.com/markets/bill-gates-elon-musk-twitter-accounts-hacked-nigerian-bitcoin-scam-over-53000-stolen

Who will be painted as the baddie here?

Yep you guessed it BITCOIN, criminals fleecing unsuspecting saps, it needs to be banned/brought under strict control will be the call all over the bought and paid for mainstream media

$ whois cryptoforhealth.com   <------ CAUTION. This is a maybe malware site - do NOT click
   Domain Name: CRYPTOFORHEALTH.COM
   Registry Domain ID: 2546217275_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.namesilo.com
   Registrar URL: http://www.namesilo.com
   Updated Date: 2020-07-15T17:42:28Z
   Creation Date: 2020-07-15T17:36:34Z
   Registry Expiry Date: 2021-07-15T17:36:34Z
   Registrar: NameSilo, LLC
   Registrar IANA ID: 1479
   Registrar Abuse Contact Email: abuse@namesilo.com
   Registrar Abuse Contact Phone: +1.4805240066
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Name Server: MAYA.NS.CLOUDFLARE.COM
   Name Server: PHIL.NS.CLOUDFLARE.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2020-07-15T19:44:29Z <<<

-CUT-

I can’t believe someone is still falling for such classic scams...

https://www.blockchain.com/btc/address/bc1qxy2kgdygjrsqtzq2n0yrf2493p83kkfjhx0wlh

People, don't be naive! No one will send you back double.

How this actually happened any official announcement from anyone?

I wonder how many people got already affected by it as this is from all official accounts  :'(

The choice of accounts was a mixture of crypto personalities, some big names in politics, some in technology, and some celebrities. No wonder why more than a hundred dollars in BTC was already obtained by the hackers in a matter of hours.

Meanwhile, someone made 7 separate transactions to the address used in the hacking in order to send a message which promotes Monero (XMR). :D

https://i.imgur.com/c9l1DZ8.png
Image grabbed from https://s3.cointelegraph.com/storage/uploads/view/4dc22b3a030b2a70120f275567fbd2dc.png

Joe Biden, Elon Musk, Jeff Bezos and other high-profile Twitter accounts were the target of a widespread hack to offer fake bitcoin deals Wednesday in one of the most prominent security breaches on a social media site.

Some BTC address that was published as part of the scam has already received over 5 BTC 12 BTC since the hacking of the twitter accounts. I can’t believe someone is still falling for such classic scams...

The choice of accounts was a mixture of crypto personalities, some big names in politics, some in technology, and some celebrities. No wonder why more than a hundred dollars in BTC was already obtained by the hackers in a matter of hours.

I doubt that number, some transactions have been started well after the tweets have been deleted and I have a weird feeling I've seen the same amount of around ~12 BTC in the last doubling scam, I'll check my post history since at that time I watched the addresses more carefully and they were simply swapping money across to inflate the numbers.

Unsurprisingly, the hackers used some of the funds from the different scam addresses to pay into their main collection address to make it seem like more people are participating and benefiting from the scam.

I find it weird that a person smart enough to launch such an attack and which spent quite a lot of time planning it resorted in the end with all that knowledge to a stupid doubling scam, which I doubt it earned him that much money. Total waste of brain cells.

Not just the crypto exchanges but hackers also hacked famous crypto enthusiasts personalities like Elon Musk, Bill Gates, etc.

They are doing some fake giveaway and doubling btc. With all those ongoing hacks with twitter, glad that twitter is doing actions immediately about it to prevent those hackers to scam more twitter users.

I find it weird that a person smart enough to launch such an attack and which spent quite a lot of time planning it resorted in the end with all that knowledge to a stupid doubling scam, which I doubt it earned him that much money. Total waste of brain cells

I think this is a long time and well planned scam attack but what i still don't understand is that people still send BTC during the time of posting this message to the address despite the wallet been reported for a scam.

I find it weird that a person smart enough to launch such an attack and which spent quite a lot of time planning it resorted in the end with all that knowledge to a stupid doubling scam, which I doubt it earned him that much money. Total waste of brain cells.

There are some rumors circulating on twitter that the scam was just a cover for something else. For example, stealing direct messages from users, destroying twitter's reputation or something like that.

The DMs from all of those people might indeed be worth more than the $100k he got from the simple doubling scam.

What the fuck just happened? This is a massive breached, or shall I shall heist at the highest level. Jack has a lot of explaining to do specially to those billionaires and them investors.
https://i.imgur.com/Fy7Cpmn.jpg

That's insane, how can he hacked multiple account is it more on the users to blame or the social media platform itself ?

I would understand if its just dummy accounts newly created but this and official accounts of the most renowned Crypto companies hacked. Its a miracle that no one got scammed at this point.

The DMs from all of those people might indeed be worth more than the $100k he got from the simple doubling scam.

Nah, it was the platform that was hacked so I don't think that it will have a big impact on bitcoin. Besides, this is not the first time that we have seen bitcoin being used by criminals, so I don't think that the narrative behind this hacks will focus on bitcoin but more on Twitter itself. They are a social platform offering service to their customers, so where is the security?? And as I have in the other thread, there's a possibility that Twitter will be liable, specially that those involved are high profile accounts.

And Jack is a pro-bitcoiner.

While true I cannot help but wonder are people that dense? Do they really think the stored information they have on those social media sites is safe enough to the point they are willing to store important information there? I could understand a normal person doing it, after all what is the biggest secret an average person will hold? At worst they are cheating on their partner or something, but for those personalities that have access to privileged information storing anything important on those platforms is just asking for trouble and could comeback to kick their butts on the future.

You'd be surprised how stupid 'smart' people can be. If that happens, some of the higher-up heads could roll.

The most disturbing news on the internet for me.

I am curios if they have said any word about this?

TEX-LXRY

I hope you mean the most disturbing RECENT news.

I wouldn't call a hack of a few twitter accounts that don't hold people's lifetime savings or important work disturbing. To be hnoest, I've never had a twitter account and never will. Most "normal" people don't need to tweet.

Have you seeen what so called celebrities are tweeting these days? The stupid shit on that platform is disturbing not the hack.

Very brave to hack a famous exchanges twitter account, there will be many victims with this phishing attack. Moreover, Twitter account followers
that's been hacked so much. I'm worried that many newbies will fall victim, thank you for creating this topic. At least the members of this forum
has received information related to phishing attacks carried out by the cryptoforhealth scam site.

Twitter called it a "social engineering attack", which makes me think that it was something simple like: the attacker called Twitter support, said, "Hey, it's <Elon Musk / Bill Gates / etc.>. Wouldn't you know it, I lost my 2FA device and my password. Could you help me?" And then the Twitter support person was like, "Sure, just give me your birthday for verification and I'll have this fixed right away, sorry for the inconvenience!"

Support people want to help the person they're talking to as quickly as possible. They're usually the weakest link, not any technical flaw. You see this same sort of social engineering used in SIM swapping attacks, common against Bitcoiners. (There's a victim of SIM swapping on the front page of /r/Bitcoin right now.)


The DMs from all of those people might indeed be worth more than the $100k he got from the simple doubling scam.

true but i seriously doubt they got that much money out of the scam. i said this in the other topic too, the amount placed in those addresses is like the beggars who put the first dollar in their bowl to make people feel safe giving up their money...

Both twitter and bitcoin is on fire here, not just the other way around but the effect on bitcoin will be huge since this is the reason why there was a breaching in the first place to scam people using bitcoin. Now I'm thinking how many people are flagging bitcoin as false instrument for investment. I'm quite in doubt with the number of accounts that has been hacked, how did they do it? How about their 2FA authenticator?

What @theymos have concluded might just happened without authenticating the caller.  twitter support ???

I saw an article (https://www.globalcryptopress.com/2020/07/todays-twitter-hack-results-over-300.html?m=1) on Facebook about how much the scammer (s) got : over $115,000 given by over 300 people (though the articles said 'idiots').

It may be not that much to you guys but when converted to our country's currency, that's over Php 5,000,000! I don't know how long I'll be able to learn such amount but he only got it within a day or maybe even less.

I smell a false flag here.

Accounts with millions of followers , Obama, Biden, Gates, Musk, Bezos involved. https://www.zerohedge.com/markets/bill-gates-elon-musk-twitter-accounts-hacked-nigerian-bitcoin-scam-over-53000-stolen

Who will be painted as the baddie here?

Yep you guessed it BITCOIN, criminals fleecing unsuspecting saps, it needs to be banned/brought under strict control will be the call all over the bought and paid for mainstream media

The DMs from all of those people might indeed be worth more than the $100k he got from the simple doubling scam.

On a second thought, what if this is the main intention! they were actually after a sensitive info, then the rest of the funds were just a front to divert attention ???

The DMs from all of those people might indeed be worth more than the $100k he got from the simple doubling scam.

And you can also lock this topic.And if someone need more discussion or something to know they can look up at these topics.

What I want to know: was the exploit fixed? The Twitter security flaw closed off??

If not this will just continue happening.

The last info I got from the Twitter security team is trying to investigate the incident. I am very sure that social media as big as Twitter will not allow that to happen again, because that incident is an event where a portion of Twitter that has been verified tweeted a scam.

Scammers are on rampage, all out to defraud peoples especially those new to the space. Here is a similar scam giveaway on medium, also purported to be from Elon Musk.
https://bitcointalk.org/index.php?topic=5260213.msg54739397#msg54739397

What I want to know: was the exploit fixed? The Twitter security flaw closed off??

If not this will just continue happening.

This is such a massive account hacking to a high profile accounts, that even the personalities from the music industry was also included, and the political figures as well.
But, it's too dumb for the people to believe such fake generosity, that If you send Btc to a certain address it will return double. Most likely, a smart person's response would be like to confirm whether the tweet was legit or an account was being compromised by hackers.

This is going to have a bad impact on Twitter in general.

It's unbelievable how bad the security of these crypto-related accounts must have been. A simple 2FA device would have likely prevented this.
I could see them receiving more liability if the hackers aren't found here.

The interviews indicate that the attack was not the work of a single country like Russia or a sophisticated group of hackers. Instead, it was done by a group of young people — one of whom says he lives at home with his mother — who got to know one another because of their obsession with owning early or unusual screen names, particularly one letter or number, like @y or @6.

The Times verified that the four people were connected to the hack by matching their social media and cryptocurrency accounts to accounts that were involved with the events on Wednesday. They also presented corroborating evidence of their involvement, like the logs from their conversations on Discord, a messaging platform popular with gamers and hackers, and Twitter.

Playing a central role in the attack was Kirk, who was taking money in and out of the same Bitcoin address as the day went on, according to an analysis of the Bitcoin transactions by The Times, with assistance from the research firm Chainalysis.

But the identity of Kirk, his motivation and whether he shared his access to Twitter with anyone else remain a mystery even to the people who worked with him. It is still unclear how much Kirk used his access to the accounts of people like Mr. Biden and Mr. Musk to gain more privileged information, like their private conversations on Twitter.

The hacker “lol” and another one he worked with, who went by the screen name “ever so anxious,” told The Times that they wanted to talk about their work with Kirk in order to prove that they had only facilitated the purchases and takeovers of lesser-known Twitter addresses early in the day. They said they had not continued to work with Kirk once he began more high-profile attacks around 3:30 p.m. Eastern time on Wednesday.

“I just wanted to tell you my story because i think you might be able to clear some thing up about me and ever so anxious,” “lol” said in a chat on Discord, where he shared all the logs of his conversation with Kirk and proved his ownership of the cryptocurrency accounts he used to transact with Kirk.

“lol” did not confirm his real-world identity, but said he lived on the West Coast and was in his 20s. “ever so anxious” said he was 19 and lived in the south of England with his mother.

Investigators looking into the attacks said several of the details given by the hackers lined up with what they have learned so far, including Kirk’s involvement both in the big hacks later in the day and the lower-profile attacks early on Wednesday.

The Times was initially put in touch with the hackers by a security researcher in California, Haseeb Awan, who was communicating with them because, he said, a number of them had previously targeted him and a Bitcoin-related company he once owned. They also unsuccessfully targeted his current company, Efani, a secure phone provider.

So if this is true, I maybe wrong with my impression that the hackers come from a well coordinate group. But according to this article, it was pull by some kid who still lives with their mom and was a teen-ager.

The MO is so stupid and the opportunity it presented was so resoundingly squandered that that makes perfect sense. Someone with more intelligence and motivation could've made much, much more of it.

I presume they'll all claim to be autistic so they didn't understand what they were actually doing and will be too fragile to be extradited to spend the rest of their lives being tortured in a shipping container by Homeland Security. I would too.

It's unbelievable how bad the security of these crypto-related accounts must have been. A simple 2FA device would have likely prevented this.
I could see them receiving more liability if the hackers aren't found here.
Many of these Twitter accounts are followed by people that aren't well versed or very knowledgeable with into crypto and just want some news. Holding crypto doesn't mean you're an expert.
The accounts of big companies are trusted by many people uncritically for what they post... They should have invested in better security. Not that it's hard to secure a twitter account.

Regarding the famous account twitter hacked being talked about, it is true that not all accounts hacked are related to cryptocurrency.
But many people focus on crypto related Twitter accounts, maybe many of the victims are from the crypto community. Twitter is now
investigating this incident, hopefully the cause can be known. But I agree with most people, that there are inside people on Twitter
involved. Because famous accounts are the average victims have good security, this hacker can easily do it. I'm sure someone inside
gave the hackers access, but let's we wait for the results of the investigation carried out by Twitter.

The most surprising thing about this story for me is how quickly people were ready to part with their money for a rather controversial adventure.
There are hundreds of similar scams, they are all the same.

The hackers didn't even decide to invent anything new, but used a completely old and hackneyed scheme. Nevertheless, they earned 100 thousand dollars.
The question is why people still do not think with their own heads?

"Everyone is asking me to give back," a tweet from Mr Gates' account said. "You send $1,000, I send you back $2,000."

Regarding the famous account twitter hacked being talked about, it is true that not all accounts hacked are related to cryptocurrency.
But many people focus on crypto related Twitter accounts, maybe many of the victims are from the crypto community. Twitter is now
investigating this incident, hopefully the cause can be known. But I agree with most people, that there are inside people on Twitter
involved. Because famous accounts are the average victims have good security, this hacker can easily do it. I'm sure someone inside
gave the hackers access, but let's we wait for the results of the investigation carried out by Twitter.

Quite funny how some people fell for this, they just rushed and sent money to these scammers without asking questions at least. People are always in a hurry to make money they forget to be careful and at the end they are misled. Even if all these cryptocurrency websites or organization wants to do such a thing they wouldn’t be asking you to send them cryptocurrency to double it for you, this is not a casino lol.

This is even a old strategy that is being used by scammers. I hope this experience is enough and people who fell for it have learned to be careful next time. Until we people learn and being careful, those hackers and scammer will keep attempting in all possible means to make us fall as prey for them. So, just ignoring all non-realistic tweets which are even from well recognized people will help us.

Twitter CEO Jack Dorsey said Thursday the company “fell behind” in some of its security restrictions that led to the hack of prominent users including former president Barack Obama and Tesla chief executive Elon Musk on the social media site last week.

“Last week was a really tough week for all of us at Twitter, and we feel terrible about the security incident that negatively affected the people we serve and their trust in us,” Dorsey said in prepared remarks on an earnings call. “Security doesn’t have an end point. It’s a constant iteration to stay steps ahead of adversaries. We fell behind, both in our protections against social engineering of our employees and restrictions on our internal tools.”

Here is the latest update.

Twitter CEO apologizes for hack, confirms some private messages were accessed


https://www.washingtonpost.com/technology/2020/07/23/twitter-apology-quarterly-earnings/

Also confirmed that private messages have been accessed and I think that is more damaging specially if those messages are very important or classified to say the least.

No one was given enough time to rethink about it. Only half an hour was the upper time limit, bitcoin transactions usually take longer than that to get confirmed, so people were in a hurry to double up their money and in the end they got scammed. Moreover as more than one account was having the same tweet and all were verified accounts which added more credibility to this scam. Scammers are finding new ways to steal our money and but since these twitter scams are running from quiet a lot of time any veteran could have seen the truth behind it, if bitcoins were being given away then the verified account could have just asked the address, why they had to make the user send money to them on a promise to return double money back.