No Phishing

Twitter Hackers Were Smart, But Hardly Genius

Whenever you see a hack like the one that befell Twitter a couple of weeks back, there’s inevitably a quote from a spokesperson about the “complicated” nature of the hack.

As we learn more about what happened at Twitter though, that doesn’t appear to be so accurate.

The incident took place on July 15 when several Twitter employees were victimized by a phone-based spear-phishing attack that provided the hackers with credentials for the social media firm’s internal systems and tools enabling their takeover, Twitter reported last week.

So, OK, it does take some smarts to socially engineer your way into a network and use their internal tools. It’s not “so” complicated, but it takes some level of knowing what you’re doing. But, these same smart people who put together such a complicated hack, also got caught pretty quickly.

Investigators were able to tie Sheppard and Fazeli to the various cryptocurrency wallets and Discord accounts involved using their driver’s license numbers, which the two used to verify their cryptocurrency wallets.

Smart enough to get in, not smart enough to cover their tracks when getting paid. That doesn’t seem so smart. Which goes to show, that security around Twitter could have been a lot better, and people who work there maybe should have been a little less careless. That doesn’t bode well for the rest of us when even a big tech company can’t get this right. How many of us have people on staff who might fall for this kind of phone-based attack?

What should we think of the complicated, super-smart hackers who also manage to be so easily identifiable? Should we accept that the hardest thing about any conspiracy, and this goes for all the conspiracy theories out there, is making sure one person doesn’t do something stupid and give it all away? That. actually, is nearly impossible, and is the one thing that makes most theories unbelievable to me. This hack proves to be a perfect example.

 

Similar Posts

  • What I’m Sharing (weekly)

    Shifting the e-Discovery Paradigm from Documents to People What is RSS? How Can You Use It? Google adds auto-delete option for your location history and activity data Apple Clamps Down on Companies Helping You to Limit Your iPhone Time Stupid Is as Stupid Does “Hot for Security reported that 42% if drives sold on eBay…

  • What I’m Reading (weekly)

    Slay These 8 Public Speaking Demons to Conquer Your Fear tags:MM Training Disruptive Change Needed for Lawyers to Become Competent in E-Discovery According to New Federal Judges Survey – Press Release – Digital Journal Exterro® Inc, today released the findings of the first-annual Federal Judges’ Survey on E-Discovery Trends and Best Practices. tags:MM LitSupport Don’t…

  • |

    If They Sell Advertising We Aren’t Their Customers

    I found much of what Doc Searls wrote about Mozilla to be true of just about all of the services we use online these days. By becoming an advertising company (in addition to everything else it is), Mozilla now experiences a problem that has plagued ad-supported media for the duration: its customers and consumers are…

  • | |

    The First Rule…

    I was reading Josh Gilliland’s post from yesterday about being careful not to break client confidentiality in your online networking status messages. Here is how the risk of disclosure is possible: a Facebook user posts a status message they deem harmless, such as “I just landed ‘Company A’ as a client and have a bunch…

  • Seriously Bad Consulting

    A friend of mine, who’s workplace shall remain nameless, finds themselves dealing with quite the mess because of their IT consultant. This is a small business, I think somewhere around 20 people, with no internal tech staff. They had outsourced the tech support to a guy, who had been doing it for over a year,…

  • |

    VMWare Fusion 2.0 Bug?

    I installed the upgrade to version 2.0 of VMWare Fusion a few weeks ago, and it seemed like there were no problems. Today, I realized there is one problem. Seems that whenever I let the VM go into a suspended state, and then restore it from that suspended state, the video slows down dramatically. Now,…

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

To respond on your own website, enter the URL of your response which should contain a link to this post's permalink URL. Your response will then appear (possibly after moderation) on this page. Want to update or remove your response? Update or delete your post and re-enter your post's URL again. (Find out more about Webmentions.)