Authorities have indicted three men this month for a serious Twitter violation that has hacked the accounts of prominent politicians, celebrities, and technology goggles to defraud people around the world of more than $ 100,000 in Bitcoin.
Suspects include a 19-year-old Briton from Bognor Regis, a 22-year-old man from Orlando, Florida, and a teenager from Tampa, Florida.
Two more people were arrested on Friday for the hack. Another accomplice, 22-year-old Nima Fazeli, was accused of supporting deliberate access to a protected computer.
A third suspect, a 19-year-old named Mason Sheppard, who went online under the nickname “Chaewon”, was arrested in the UK and charged with conspiracy to commit cable fraud, conspiracy to commit money laundering and the deliberate access of a protected computer.
On July 15, hackers took control of the accounts of major public figures and companies, including Joe Biden, Barack Obama, Elon Musk, Bill Gates, Jeff Bezos, and Apple.
The compromised accounts, which have tens of millions of followers, have sent a series of tweets suggesting a classic Bitcoin scam: followers have been told that if they put cryptocurrency on a particular Bitcoin wallet, they would get double the money would be transferred.
The hack developed over several hours, and while Twitter stopped it, Twitter prevented all verified accounts from tweeting at all – an unprecedented measure.
Twitter said Thursday that the hackers had used a telephone spear phishing attack to attack Twitter employees. After stealing employee credentials and accessing Twitter’s systems, the hackers were able to target other employees who had access to account support tools.
Spear-Phishing is a more targeted version of phishing, an impersonation fraud that uses email or other electronic communications to trick recipients into disclosing confidential information.
“This attack was based on a significant and concerted attempt to mislead certain employees and exploit human vulnerabilities to gain access to our internal systems,” the company tweeted.
The hackers targeted 130 accounts and managed to tweet from 45 accounts, access the inboxes with 36 direct messages, and download Twitter data from seven. Dutch anti-Islam lawmaker Geert Wilders said his inbox was among those accessed.