New Delhi: The Centre has issued a notice to Twitter in the backdrop of a recent hacking that targetted global high-profile users. Cybersecurity agency CERT-in has asked Twitter for the full details of the global hack, the number of Indian users affected and date impacted, if any, reports said.Also Read - Woman Denied Entry at Delhi Restaurant For Wearing Saree, Twitterati Slam Bizarre Dress Code | Watch
Several prominent Twitter accounts, including those of former US president Barack Obama, Tesla CEO Elon Musk and Microsoft co-founder Bill Gates, were hacked on Wednesday morning (Indian time) apparently to promote a Bitcoin scam in what the microblogging site believes to be a “coordinated social engineering attack.” Also Read - Viral Video: Muslim Man Sings The Iconic Mahabharata Title Song, People Say 'This is Real India' | Watch
The attackers posted tweets that appeared to promote a cryptocurrency scam. Also Read - Neeraj Chopra Shines in Cred's Hilarious New Ad, Netizens Go Gaga Over His Acting Skills | Watch
The fake tweets offered to send USD 2,000 for every USD 1,000 sent to an anonymous Bitcoin address.
The accounts, along with those of Obama, Kanye West, Kim Kardashian West, Warren Buffett, Bezos and Mike Bloomberg, posted similar tweets soliciting donations via Bitcoin to their verified profiles on Wednesday,
The posts all included the address of the same bitcoin wallet, which has seen as much as USD 112,000 pour into it over the last few hours.
Several accounts were blocked across the world for a brief period of time.
In a blog post, Twitter has revealed about its investigation. “At this time, we believe attackers targeted certain Twitter employees through a social engineering scheme. What does this mean? In this context, social engineering is the intentional manipulation of people into performing certain actions and divulging confidential information,” it said.
“The attackers successfully manipulated a small number of employees and used their credentials to access Twitter’s internal systems, including getting through our two-factor protections. As of now, we know that they accessed tools only available to our internal support teams to target 130 Twitter accounts. For 45 of those accounts, the attackers were able to initiate a password reset, login to the account, and send Tweets. We are continuing our forensic review of all of the accounts to confirm all actions that may have been taken. In addition, we believe they may have attempted to sell some of the usernames.”
“For up to eight of the Twitter accounts involved, the attackers took the additional step of downloading the account’s information through our “Your Twitter Data” tool. This is a tool that is meant to provide an account owner with a summary of their Twitter account details and activity. We are reaching out directly to any account owner where we know this to be true. None of the eight was verified accounts,” the blog read
Attackers were not able to view previous account passwords, as those are not stored in plain text or available through the tools used in the attack. They were able to view personal information including email addresses and phone numbers, which are displayed to some users of our internal support tools.
“In cases where an account was taken over by the attacker, they may have been able to view additional information. Our forensic investigation of these activities is still ongoing,” Twitter said.