San Francisco Chronicle

Brazen Twitter hack linked to bitcoin scam

- By Sheera Frenkel

One by one, the Twitter accounts of some of the most prominent people in American business and politics started displaying the same message Wednesday afternoon: Send bitcoin to the link below and you will double your money. The names included Joe Biden and Barack Obama, Kanye West and Bill Gates, and countless more.

But it was all a scam, the result of one of the most brazen online attacks in memory.

A first wave of attacks went after cryptocurr­encyrelate­d companies and personalit­ies at midday on the East Coast, but over a few hours, the prominence of the victims increased. Many of the tweets were quickly removed, but in some cases similar tweets were sent again from the same accounts.

Twitter appeared to be essentiall­y power

less to stop them. The San Francisco company eventually disabled broad parts of its service as it worked to stop the attack. “You may be unable to Tweet or reset your password while we review and address this incident,” the company said.

The attack was a major show of force by attackers who seized a key means of communicat­ion for a Who’s Who list of Americans. The hackers did not use their access to take aim at any important institutio­ns or infrastruc­ture like the stock market — instead deciding to just ask for bitcoin.

But the attack was frightenin­g because the hackers could have easily caused much more havoc. There was speculatio­n on what would have happened had the attackers instead tried to move the financial markets or sow political chaos. The attack exposed the vulnerabil­ity of a company, Twitter, that has become the nation’s de facto live news source.

The messages were a version of a longrunnin­g scam in which hackers pose as public figures on Twitter, and promise to match or even triple any funds that are sent to their bitcoin wallets. In the past, hackers have created fake accounts to try to convince users that the funds will be going to public figures like Musk or Gates. The attacks Wednesday were the first time that the real accounts of public figures were used in the scam.

Accounts belonging to Musk, the Tesla CEO, and Gates, the Microsoft mogul, were among the first prominent Twitter accounts to be compromise­d.

Within the hour, West’s account was hit along with many more. The accounts have huge followings. More than 51 million accounts follow Gates, while Musk’s Twitter account is followed by 36.9 million.

Musk has frequently been a target of scammers seeking to steal bitcoin. In the past, scammers have created accounts that imitated Musk and replied to his tweets, trying to trick users into sending them money.

A spokesman for the Biden campaign confirmed that Twitter had removed the tweet promoting the scam and locked down Biden’s account. But the message was repeatedly posted and deleted on Musk’s and West’s accounts.

Twitter has fallen victim to breaches before. In August, hackers compromise­d the account of Twitter CEO Jack Dorsey, and posted racist messages and bomb threats.

Dorsey’s account was taken over after hackers transferre­d his phone number to a new SIM card, which stores a phone’s number. The practice, known as SIMswappin­g, allowed hackers to tweet from Dorsey’s account.

 ??  ??

Newspapers in English

Newspapers from United States