Twitter Explains Further How Internal Systems Were Hacked

News Twitter Hacked Internally Featured

Twitter appears to be on top of the situation where it was hacked on July 15, 2020. Just two weeks later, Twitter published tweets and a blog post to give further details of how several high-profile accounts, including politicians and major businesses, were hacked in a Bitcoin scam.

The July 15 Twitter Hack

Twitter was actually on the case within an hour of being hacked. Numerous high-profile accounts were victim to a Bitcoin scam with each account tweeting out a similar message offering thousands of dollars in cryptocurrency.

More than an hour after the messages appeared on these accounts, Twitter disabled tweets from the accounts to stop the threat from spreading even further.

Granted, it seemed real compared to the viral social media message that is often forwarded, suggesting Bill Gates is handing out great sums of money. This hack published a message on his account stating, “Everyone is asking me to give back, and now is the time. I am doubling all payments sent to my BTC address for the next 30 minutes. You send $1,000, I send you back $2,000.”

The message promised, “Only going on for 30 minutes! Enjoy!” and included a BTC address as well. Again, it’s similar to existing messaging, but assumably there were still people who fell victim to this.

The same message also appeared on the accounts of former U.S. President Barack Obama, former U.S. Vice President Joe Biden, Tesla CEO Elon Musk, Amazon CEO Jeff Bezos, rapper Kanye West, and former New York City mayor Michael Bloomberg. Even Apple and Uber were used in this scam.

News Twitter Hacked Internally Code

How the Hack Was Carried Out

So how did they do it? Twitter laid it out in a series of tweets and a blog post. The hackers started by targeting some Twitter employees using a phone spear-phishing attack. The hacker would call the employee and pretend to be someone trusted to them to get information that would allow them entry to an internal Twitter computer system.

“A successful attack required the attackers to obtain access to both our internal network as well as specific employee credentials that granted them access to our internal support tools,” explained Twitter in a blog post.

“Not all of the employees that were initially targeted had permissions to use account management tools, but the attackers used their credentials to access our internal systems and gain information about our processes.”

This allowed the hackers to “target additional employees who did have access to our account support tools.”

One-hundred thirty Twitter accounts were targeted. The hackers were able to tweet from 45 of them, access the DM inbox of 36, and download the Twitter data of 7.

While Twitter’s internal tools, controls, and processes are constantly being updated and improved, it’s now “taking a hard look” at how it can make them more secure.”

Twitter has been the victim of hacks before, such as the viral birth year Twitter hoax and was also used to make off with $180K in Bitcoins in a very similar hack to the July 15 instance by posing as Elon Musk.

Subscribe to our newsletter!

Our latest tutorials delivered straight to your inbox

Laura Tucker Avatar

Read next

When the SS Great Eastern laid the first working transatlantic telegraph cable in 1866, a message that had taken ten days by steamship suddenly crossed the ocean in minutes, and the financial markets of London and New York were forced, within a single trading week, to invent the modern concept of synchronised global price.
The Big Ear telescope was scanning at 1420.4056 megahertz on the night of 15 August 1977, the exact frequency at which hydrogen atoms vibrate across the universe, because Giuseppe Cocconi and Philip Morrison had argued years earlier that any species trying to be found would broadcast on that channel — and then, for 72 seconds, something did.
In 2016, archaeologists dated two rings of snapped stalagmites in France’s Bruniquel Cave to 176,500 years ago, evidence that Neanderthals had walked 336 metres into darkness with fire and built architecture deep underground long before modern humans reached Europe
Otto von Bismarck was 74 when Germany adopted the world’s first national old-age social insurance program in 1889, setting the pension age at 70 after years of fighting socialists with bans, laws, and a promise few workers would live long enough to use
When cosmonaut Valeri Polyakov stepped out of his Soyuz capsule in March 1995 after 437 consecutive days aboard Mir, doctors recorded him at several centimetres above his pre-flight height, and his spine had become so unaccustomed to gravity that the recovery team carried him to a chair rather than risk the compression of letting him walk.
When Bell Labs engineer Karl Jansky pointed a rotating antenna at the sky in 1932 looking for sources of transatlantic radio static, he kept picking up a faint hiss that peaked every 23 hours and 56 minutes, and he eventually realized he had become the first human to hear the center of the Milky Way.
When Harvard astronomer Cecilia Payne submitted her 1925 doctoral thesis arguing that the Sun was made almost entirely of hydrogen, the field’s senior figure Henry Norris Russell talked her into adding a line calling the result ‘almost certainly not real,’ and then published the same conclusion himself four years later to widespread acclaim.
When seismic waves from the Chicxulub impact reached what is now North Dakota roughly ten minutes after the asteroid struck, they appear to have triggered a ten-metre standing wave in an inland river that flung fish onto the bank and buried them under glass beads still falling from the sky.