Twitter’s security fell short before hack targeting celebrities, regulator says


The report by New York’s Department of Financial Services also recommended that the largest social media companies be deemed systemically important, like some banks following the 2008 financial crisis, with a dedicated regulator monitoring their ability to combat cyberattacks and election interference. — Reuters

NEW YORK: Twitter Inc suffered from cybersecurity shortfalls that enabled a “simple” hack attributed to a Florida teenager to take over the accounts of several of the world’s most famous people in July, according to a report released on Wednesday.

The report by New York’s Department of Financial Services also recommended that the largest social media companies be deemed systemically important, like some banks following the 2008 financial crisis, with a dedicated regulator monitoring their ability to combat cyberattacks and election interference.

“That Twitter was vulnerable to an unsophisticated attack shows that self-regulation is not the answer,” said Linda Lacewell, the financial services superintendent.

Twitter did not immediately respond to a request for comment. It has acknowledged that some employees were duped into sharing account credentials prior to the hack.

New York Governor Andrew Cuomo ordered a probe following the July 15 hack of celebrity Twitter accounts, in an alleged scam that stole more than US$118,000 (RM489,759) in Bitcoin.

Those whose accounts were hacked included US presidential candidate Joe Biden; former President Barack Obama; billionaires Jeff Bezos, Bill Gates and Elon Musk; singer Kanye West, and his wife Kim Kardashian, the reality TV star.

Lacewell said hackers obtained log-in credentials after calling several employees, pretending to work in Twitter’s information technology department, and claiming to be responding to problems with the company’s Virtual Private Network, which had become common because employees were working from home.

“The extraordinary access the hackers obtained with this simple technique underscores Twitter’s cybersecurity vulnerability and the potential for devastating consequences,” the report said.

Twitter’s lack at the time of a chief information security officer also made the San Francisco-based company more vulnerable, the report said.

Florida prosecutors said Graham Ivan Clark was the mastermind behind the hack, and charged the 17-year-old Tampa resident as an adult with 30 felonies.

Clark has pleaded not guilty. Federal prosecutors charged two others with aiding the hack. – Reuters

Article type: metered
User Type: anonymous web
User Status:
Campaign ID: 18
Cxense type: free
User access status: 3
   

Did you find this article insightful?

Yes
No

Next In Tech News

Opinion: Threat of the digital giants and their unfettered trade monopolies
Google’s Messages app rolls out global support for successor to SMS
Contact lenses worthy of James Bond to zoom and film in a blink of an eye
Will remote working be the new norm in tomorrow’s world?
Facebook’s AI mistakenly bans ads for struggling businesses
HTTPS only: Firefox now blocks websites without encrypted connections
PlayStation 5 giveaways: Real deal, phishing or data scam?
For Big Tech, Biden brings a new era but no ease in scrutiny
Twitter has flagged 200 of Trump’s posts as ‘disputed’ or misleading since the US election day – does it make a difference?
China tops world in AI patent filings, surpassing the US for the first time

Stories You'll Enjoy