Tampa teen accused of fraud in Twitter hack pleads not guilty
TAMPA, Fla. — A Florida teen identified as the mastermind of a scheme that gained control of Twitter accounts of prominent politicians, celebrities and technology moguls pleaded not guilty on Tuesday to multiple counts of fraud.
Graham Ivan Clark, 17, is accused of using the hijacked Twitter accounts to scam people around the world out of more than $100,000 in Bitcoin.
He is charged with 17 counts of communications fraud, 11 counts of fraudulent use of personal information, and one count each of organized fraud of more than $5,000 and accessing computers or electronic devices without authority. The brief hearing in Tampa took place via the video conferencing service Zoom.
Clark is scheduled for a bond hearing Wednesday and remains in the Hillsborough County Jail with bail set at $725,000, according to court records.
Two other men also are charged in the case. Mason Sheppard, 19, of Bognor Regis, U.K., and Nima Fazeli, 22, of Orlando, Fla., were charged separately last week in California federal court.
As part of the high-profile security breach, bogus tweets were sent out on July 15 from the accounts of Barack Obama, Joe Biden, Mike Bloomberg and a number of tech billionaires including Amazon CEO Jeff Bezos, Microsoft co-founder Bill Gates and Tesla CEO Elon Musk.
The tweets offered to send $2,000 for every $1,000 sent to an anonymous Bitcoin address.
Court papers in the California cases say Fazeli and Sheppard brokered the sale of Twitter accounts stolen by a hacker who identified himself as “Kirk,” and said he could “reset, swap and control any Twitter account at will” in exchange for cybercurrency payments, claiming to be a Twitter employee.
The documents do not specify Kirk’s real identity but say he is a teen being prosecuted in the Tampa area.
Twitter has said the hacker gained access to a company dashboard that manages accounts by using social engineering and spear-phishing smartphones to obtain credentials from “a small number” of Twitter employees “to gain access to our internal systems.” Spear-phishing uses email or other messaging to deceive people into sharing access credentials.